Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Oversee AI systems, ensuring secure handling of sensitive data and compliance with regulations.
- Company: Spectrum.Life, a leading HealthTech innovator transforming lives through digital health solutions.
- Benefits: Competitive salary, flexible working options, 25 days leave, and extensive health support.
- Why this job: Join us to shape the future of AI in health while ensuring privacy and security.
- Qualifications: Degree in Cyber Security or related field, with knowledge of GDPR and AI governance.
- Other info: Dynamic role with opportunities for growth in a rapidly expanding company.
The predicted salary is between 36000 - 60000 £ per year.
About us
Spectrum.Life is a whole-of-health digital partner that guides organisations and their people to thrive, delivering clinically backed digital health, mental health and wellbeing solutions. Our HealthTech delivers digital transformation for Insurers, Educators and Employers through Co-creation or seamlessly integrated out-of-the-box solutions, that decrease digital fragmentation and engage, empower, and transform their people’s lives. Established in 2018 by Stuart McGoldrick and Stephen Costello, Spectrum.Life provides services internationally to over 7.2m insurance members, 3,000 corporate clients, 60 universities and 650,000 university students. Spectrum.Life currently employs over 350 people. Our vision is to change and save as many lives as possible.
Overview
Spectrum.Life is rapidly expanding its use of AI-driven tools, including Heidi AI (medical transcription), Fin (AI-powered customer support), and Dr. Jay (medical guidance). These initiatives provide significant opportunities for efficiency and innovation but also introduce major security, privacy, and compliance risks, especially given the sensitive nature of personal and health data. The Security & Privacy – AI Specialist will provide dedicated oversight of these systems and others, ensuring their deployment and use complies with GDPR, ISO 27001/27701, and the forthcoming EU AI Act, while embedding privacy and security by design. This role is critical to enabling safe AI innovation without regulatory, reputational, or security setbacks.
Responsibilities
- Oversight of AI Systems
- Monitor and govern AI tools (e.g., Heidi AI, Fin, Dr. Jay) to ensure secure and compliant handling of sensitive data.
- Implement technical controls for anonymisation, redaction, and encryption.
- Continuously monitor prompts, outputs, and integrations for inappropriate or risky use.
- Compliance Leadership
- Lead GDPR and ISO 27001/27701 compliance for all AI initiatives, including DPIAs, lawful basis analysis, and data subject rights management.
- Drive readiness for the EU AI Act, classifying AI systems and ensuring conformity with high-risk AI obligations (documentation, oversight, transparency).
- Support AI and broader compliance through monitoring, risk detection, and the development of responsible AI practices, privacy notices, and documentation.
- Risk Management & Security Integration
- Assess and mitigate risks of data leakage from AI systems.
- Evaluate vendor security for third-party AI and non AI providers and enforce contractual safeguards.
- Align AI systems with existing information security frameworks, including incident response and access controls.
- Contribute to ISMS management /audits, controls, upkeep, and compliance monitoring.
- Policy, Governance & Training
- Draft and maintain an AI Acceptable Use Policy and internal guidance on security, privacy, and AI usage.
- Deliver training for staff and stakeholders on responsible AI usage and risk awareness.
- Promote privacy-by-design and security-by-design in all AI projects.
- Business Enablement
- Serve as subject-matter expert for AI security and privacy, advising technical and non-technical stakeholders.
- Support innovation by ensuring compliance guardrails are built into AI projects from inception.
- Provide reporting and insights on AI risk, usage, and compliance status to leadership.
- Support Privacy Team case management with subject rights requests, incidents, internal queries and case resolution.
Requirements
- Degree or Equivalent Experience: A degree in Cyber Security, Computer Science, or a related discipline, or equivalent proven professional experience.
- Data Protection Expertise: Proven knowledge of GDPR, EU AI Act, ISO 27001/27701, and privacy impact assessments.
- Security Knowledge: Strong grasp of encryption, access controls, vendor risk management, and incident response.
- AI Literacy: Understanding of AI/ML technologies, their risks, and governance requirements.
- Governance & Policy Development: Experience drafting policies, embedding privacy/security by design, and running training programmes.
- Stakeholder Management: Skilled in engaging technical and business teams, regulators, and external partners.
Desirable
- Professional experience in security, privacy, or compliance roles within highly regulated industries (healthcare, financial services, technology).
- Track record of independent ownership of compliance/security programmes.
- AI / Security / Privacy certifications are not required, but demonstrable understanding of these areas and their risks is essential.
Benefits
- Full time permanent contract
- Competitive salary (Dependent on experience).
- In-office, remote or hybrid working options
- 25 days annual leave
- 24/7 EAP and a wide range of health and wellbeing supports
- Extensive list of employee perks and benefits https://app.box.com/s/6wwkvowbev6cn7tlvq9yz32amnpmnvcl
#J-18808-Ljbffr
Security & Privacy – AI Specialist employer: Spectrum.Life
Contact Detail:
Spectrum.Life Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Security & Privacy – AI Specialist
✨Tip Number 1
Network like a pro! Reach out to people in the industry, attend events, and connect on LinkedIn. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Tip Number 2
Prepare for interviews by researching Spectrum.Life and its AI initiatives. Show us that you understand our mission and how your skills can help us navigate the security and privacy challenges we face.
✨Tip Number 3
Practice your responses to common interview questions, especially around GDPR and AI compliance. We want to see that you can articulate your knowledge clearly and confidently.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows us you’re genuinely interested in joining our team.
We think you need these skills to ace Security & Privacy – AI Specialist
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Security & Privacy – AI Specialist role. Highlight your experience with GDPR, ISO standards, and any relevant AI tools you've worked with. We want to see how your skills align with our mission!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about security and privacy in AI. Share specific examples of how you've tackled similar challenges in the past. We love a good story!
Showcase Your Knowledge: In your application, don’t forget to mention your understanding of AI technologies and their associated risks. We’re looking for someone who can navigate the complexities of compliance and security, so let us know how you can contribute!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way to ensure your application gets into the right hands. Plus, it shows us you’re serious about joining our team at Spectrum.Life!
How to prepare for a job interview at Spectrum.Life
✨Know Your Stuff
Make sure you brush up on GDPR, ISO 27001/27701, and the EU AI Act. Being able to discuss these regulations confidently will show that you're not just familiar with the theory but can apply it practically in the role.
✨Showcase Your AI Knowledge
Be prepared to talk about AI technologies and their associated risks. Share examples of how you've managed security and privacy in AI projects before, as this will demonstrate your hands-on experience and understanding of the field.
✨Prepare for Scenario Questions
Expect questions that put you in hypothetical situations regarding data breaches or compliance issues. Think through your responses ahead of time, focusing on your problem-solving skills and how you would ensure compliance while maintaining innovation.
✨Engage with Stakeholders
Highlight your experience in engaging with both technical and non-technical teams. Discuss how you’ve communicated complex security concepts to diverse audiences, as this is crucial for the role and will show your ability to bridge gaps between teams.
