Senior AI Security Consultant

Job title: Senior AI Security Consultant 

Division: Operations  
Department: Cyber & Information Resilience 

• Salary: National (Edinburgh and Leeds) ranging from £74,000 to £103,000 and London from £82,300 to £113,000 (salary offered will be based on skills and experience) 

• This role is graded as: Technical Specialist, Regulatory 

• Your external recruitment contact is Raimonda via raimonda.stankute@fca.org.uk 

• Your internal recruitment contact is Lauren via Lauren.McHale@fca.org.uk  

• Applications must be submitted through our online portal. Applications sent via social media or email will not be accepted. 

About the FCA and team   

We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective. By joining us, you’ll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services.   

The Cyber and Information Resilience (C&IR) department is responsible for managing cyber security at the FCA, protecting organisational data and systems from malicious and accidental threats. C&IR is part of a Directorate lead by our CISO, Director of Cyber & Operational Resilience.  

This role sits within the Security Expertise & Advisory (SE&A) team of the C&IR department. SE&A team provides dedicated consultancy, advice, and guidance to ensure business change is delivered safely and in line with FCA policies and standards. The team supports a wide range of projects and business initiatives, building enduring partnerships and delivering expert support across the organisation. 

The Senior AI Security Consultant serves as the FCA’s recognised subject matter expert for AI security, providing authoritative advice, challenge and risk-based recommendations to support the secure and responsible adoption of AI technologies. Working across business, technology, governance, architecture and risk functions, the role identifies, assesses and manages AI-related security risks while shaping the organisation’s approach through the development of security frameworks, policies, standards and best practices. 

The role provides technical leadership in AI threat modelling, risk assessment and security testing, while monitoring emerging threats, industry developments and evolving technologies. Acting as a trusted advisor to stakeholders, the AI Security Specialist supports strategic decision-making, improves AI security capability across the FCA and promotes awareness and good practice to ensure robust governance and risk management. 

Role responsibilities 

• Provide authoritative AI security subject matter knowledge to support risk-informed decision-making and the secure adoption of AI technologies across the FCA 

• Carry out AI threat modelling, security risk assessment and security design activities for AI systems and emerging digital capabilities, providing specialist recommendations on risk treatment, security controls and secure adoption approaches 

• Provide specialist oversight and technical leadership for AI security reviews, control validation and testing activities, delivering expert recommendations on the effectiveness of controls protecting AI systems and emerging AI technologies 

• Oversee the development and continual improvement of AI security frameworks, standards, policies, guidance and secure design principles, ensuring consistent and proportionate approaches to AI security risk management across the organisation 

• Act as the FCA’s recognised AI Security subject matter authority and centre of expertise, providing organisational leadership on emerging AI security threats, technologies, standards and regulatory developments and translating these into practical guidance, frameworks and risk management approaches 

• Build organisational AI security capability through stakeholder engagement, knowledge sharing, awareness initiatives and the promotion of good practice across the FCA 

• Demonstrate flexibility in managing shifting priorities and workloads to effectively support wider business needs. Respond to incoming requests within agreed SLAs, ensuring consistent adherence to team service standards during periods of high and low demand. 

• Provide effective leadership, guidance, and mentorship to other team members across SE&A, sharing specialist expertise and experience to foster their professional growth and development. 

• Support the SE&A Manager in driving continuous improvement initiatives to enhance the capability and efficiency of SE&A services. 

Skills required 

Minimum: 

• Significant experience in cyber security, security architecture, security consultancy, or risk management, with deep knowledge of AI security, emerging technologies and AI-related risk 

• Solid understanding of AI technologies and ecosystems, including generative AI, agentic systems, AI platforms and emerging AI capabilities, with the ability to assess security risks, conduct threat modelling, evaluate controls and provide specialist guidance 

• Practical experience developing and implementing security frameworks, policies, standards and governance models, with knowledge of recognised AI security and risk frameworks such as OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, ISO 42001, ISO 27001 and related standards 

Essential: 

• Ability to analyse emerging technologies, threat intelligence, regulatory developments and evolving attack techniques, translating complex findings into practical, risk-based recommendations and security controls 

• Deep understanding of the intersection between AI security, governance, operational resilience, data, architecture, responsible AI and enterprise risk management 

• Effective stakeholder management, consultancy and influencing skills, with experience engaging senior business, technology, governance and risk stakeholders and communicating complex technical concepts to diverse audiences 

• Demonstrated ability to collaborate across multidisciplinary teams, provide technical leadership and contribute to organisational capability through mentoring, knowledge sharing and the promotion of security best practice 

• Degree-level qualification in Cyber Security, Computer Science, Information Security, or a related discipline (or equivalent experience). Relevant security, cloud, architecture, or AI governance certifications are desirable 

Benefits 

• 28 days annual leave plus bank holidays 

• Non-contributory pension (8–12% depending on age) and life assurance at eight times your salary 

• Private healthcare with Bupa, income protection and 24/7 Employee Assistance 

• 35 hours of paid volunteering annually 

• Colleagues spend a minimum of 50% of their working time in the office each month (60% for Directors and Executive Directors) across our London, Leeds and Edinburgh offices. A flexible benefits scheme designed around your lifestyle 

For a full list of our benefits and our recruitment process as a whole visit our benefits page. 

Our values and culture  

Our colleagues are the key to our success as a regulator. We are committed to fostering a diverse and inclusive culture: one that’s free from discrimination and bias, celebrates difference and supports colleagues to deliver at their best. We believe that our differences and similarities enable us to be a better organisation – one that makes better decisions, drives innovation and delivers better regulation. 

If you require any adjustments due to a disability or condition, your recruiter is here to help - reach out for tailored support. 

We welcome diverse working styles and aim to find flexible solutions that suit both the role and individual needs, including options like part-time and job sharing where applicable.

Disability confident: our hiring approach  
We’re proud to be a Disability Confident Employer and therefore, people or individuals with disabilities and long-term conditions who best meet the minimum criteria for a role will go through to the next stage of the recruitment process. In cases of high application volumes we may progress applicants whose experience most closely matches the role’s key requirements. 

Useful information and timelines  

Timeline:  

• Job advert closes: 11:59pm, 1st November 2026  

• CV Review/Shortlist: 4th November 2026  

• Interview: w/c 9th November 2026 

• Your Recruiter will discuss the process in detail with you during screening for the role, therefore, please make them aware if you are going to be unavailable for any date during this time.   

• SC Clearance is required for this role (SC Guidance) - you will hold or will be required to obtain Security Check (SC) level vetting