Director of Information Security & AI Governance in London

Flagstone is an online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash. A diverse group of people, bound by a collaborative spirit, and shared purpose. Our unique culture is our pride and joy and our competitive advantage.

To revolutionise the savings market, we need to be at our best. High performance takes more than talent — it takes a culture of kindness, respect, and growth. We're building a diverse, inclusive community, where your voice is heard and valued, with close support and room to develop.

You're a senior technology leader with a hands-on background in information security, and you've spent your career building things, not just governing them. You understand that in a world where AI is reshaping how businesses operate, security and governance are what make progress sustainable. You're genuinely excited by AI, using it in your own work, following its developments, and understanding both the opportunity and the risk it presents in a regulated environment.

What you'll do:

• Own Flagstone's information security strategy, aligned to our regulatory obligations and risk appetite.
• Lead and develop the InfoSec team, driving ISO 27001 to certification and building the programme to sustain it.
• Own our security posture across Microsoft 365, incident response, vulnerability management, and third-party risk.
• Work closely with the Head of GRC to embed security controls within the broader risk framework.
• Own the AI governance framework - policy, risk classification, tool approval, and ongoing oversight of AI adoption across the business.
• Chair an AI governance forum across engineering, product, risk, compliance, and legal.
• Lead the strategic question at the heart of this role: what does world-class internal technology look like when AI changes the economics of building?
• Own the vision for how Flagstone builds, buys, and operates internal technology, and make the case for change where the evidence supports it.
• Lead the IT function: end-user computing, device management, network infrastructure, and internal tooling for a hybrid workforce.

What you'll bring:

• A hands-on background in information security, where you've built or scaled a security programme.
• Real experience owning both IT and security, with the judgement to know when to be strategic and when to roll your sleeves up.
• ISO 27001 implementation or programme ownership experience.
• Genuine enthusiasm for AI and how it's changing the way businesses operate.
• Working knowledge of AI governance, with the intellectual curiosity and learning velocity to develop it fast.
• Director level people leadership across multi-disciplinary teams, with the presence to operate at board level and with regulators.
• Commercial instinct on build-vs-buy.
• Experience in a regulated environment, ideally fintech, payments, or financial services.

We're deliberately open on background for this one. Whether you've come up through InfoSec, IT, engineering, or a combination of all three, what matters is that you've been close to the work, you've built things, and you're genuinely excited about where AI is taking internal technology.

How we reward you:

• Hybrid working - Spend at least 1 day a week with your team in our collaborative London office.
• Competitive bonus scheme - designed to reward and recognise high performance.
• Flexible benefits budget - a pot to fund meaningful benefits for you.
• A range of salary sacrifice options to help you make tax efficient savings.
• Around the World scheme - 3 months work from anywhere scheme.
• Mental wellbeing support – Access therapy and mental health sessions.
• Learning and development – £1,000 personal development budget.
• Private health care - Enjoy all the benefits AXA has to offer.
• Medical cash plan - To help you with the costs of dental and optical expenses.
• Life insurance and Income Protection- four times your annual salary.
• Matched pension contributions up to 5%.
• 25 days holiday - plus bank holidays, well-being days and volunteering days.
• Enhanced Parental Leave – enhanced maternity, paternity and adoption pay.

All are welcome. At Flagstone, we're assembling a diverse team that defies our industry's norms. We encourage you to apply, no matter your background.