At a Glance
- Tasks: Shape AI security and governance strategies for complex organisations.
- Company: Join a growing AI-native technology consultancy in London.
- Benefits: Competitive salary, hybrid work model, and opportunities for professional growth.
- Other info: Work at the intersection of AI, security, and engineering with board-level exposure.
- Why this job: Make a real impact by bridging AI ambition with secure deployment.
- Qualifications: Experience in security, risk, and governance with strong consulting skills.
The predicted salary is between 60750 - 74250 £ per year.
If you know what it takes to navigate AI security, risk and governance within complex organisations, this is an opportunity to take that experience somewhere you can actually shape the answer.
Businesses are investing heavily in AI, but many are stuck between proving it works and proving it's safe to deploy. Boards want confidence. Engineers need practical guardrails.
We're looking for a Principal Consultant - AI Security & Governance to bridge that gap.
You’ll be joining a growing, AI-native technology consultancy, with the opportunity to build the security, governance and assurance capability around its existing proposition.
You’ll help organisations move from AI discovery and POC through to governed, secure production.
The Role
You’ll sit at the point where AI, security, governance and engineering meet, helping clients turn AI ambition into something they can confidently build, deploy and operate.
At board and risk committee level, you’ll help senior stakeholders understand AI risk, define risk appetite and make informed decisions about whether an initiative is ready to progress.
Alongside engineers, you’ll get into the technical detail – threat‑modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes.
From POC to production, you’ll bring the two sides together – making AI safe enough for the business without making it impossible for engineers to build.
What You’ll Be Doing
- Advise boards, audit and risk committees on AI risk and governance.
- Design and implement practical AI governance frameworks, policies and controls.
- Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements.
- Threat‑model Gen AI and agentic AI systems.
- Assess risks including prompt injection, data leakage, excessive agency and tool‑use escalation.
- Review AI architectures, guardrails, evaluations and security controls.
- Help establish governance and assurance from POC through to production.
- Address data access, permissions, IAM, DLP and non‑human identity risks.
- Develop AI incident response and assurance approaches.
- Assess AI models, vendors and third‑party risks.
- Lead client workshops and contribute to proposals and pre‑sales.
- Develop reusable AI governance and security frameworks, tools and client materials.
- Help develop the consultancy's point of view on AI Security and Governance.
- What We’re Looking For
Must have
- Experience across security, risk, data, GRC or a related field.
- A strong consulting background with significant client‑facing experience.
- Experience designing governance frameworks, risk assessments, policies and controls.
- Practical understanding of how AI systems are built and secured.
- Good understanding of LLMs and agentic AI, including RAG, tool use and orchestration.
- Knowledge of AI security risks including prompt injection, data leakage and excessive agency.
- Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001.
- Experience working with regulated organisations.
- The ability to communicate equally well with senior executives and technical teams.
Nice to have
- AWS, Azure or GCP security experience.
- IAM and cloud security experience.
- Python or scripting skills.
- Model risk management or second‑line risk experience.
- Experience with AI governance/data security platforms such as One Trust, Purview, Varonis, Big ID or Credo AI.
- Experience with AI security and evaluation tooling.
- Financial services experience.
- UK SC clearance eligibility.
- Relevant professional certifications.
Why This Role
The business already has strong AI engineering capability and client demand. The opportunity now is to build the security, governance and assurance layer around it.
You’ll get the breadth that can be difficult to find in larger consultancies: board‑level advisory, technical AI security, governance, delivery and pre‑sales all sitting within one Principal role.
If you’re an experienced consultant looking for a role where your expertise can directly shape a growing AI practice, we’d be interested in hearing from you.
We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age.
Principal Consultant - AI Security & Governance in London employer: Consult
At Consult, we pride ourselves on being an exceptional employer that fosters a dynamic and inclusive work culture. Our North America team is dedicated to professional growth, offering robust training and development opportunities while working in a fast-paced, innovative environment. Join us to be part of a collaborative team that values your contributions and supports your career aspirations in the exciting MedTech sector.
StudySmarter Expert Advice🤫
We think this is how you could land Principal Consultant - AI Security & Governance in London
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Consult, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Consult
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Consult. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Principal Consultant - AI Security & Governance in London
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Consult insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Consult that you’re committed to staying ahead in the game.
How to prepare for a job interview at Consult
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Consult to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Consult.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
