{"id":3967816,"url":"https://alion.io/job/scarlet-security-privacy-lead","title":"Security & Privacy Lead","company":{"id":3908732,"name":"Scarlet","domain":"scarlet.cc","url":"https://alion.io/company/scarlet-cc","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":115000,"max":145000,"currency":"GBP","period":"year","gross":null,"usd_annual":193675},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"EU AI Act","optional":true},{"name":"ISO 42001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-09T14:56:57Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T20:13:59Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"We pull medical technology from the future to solve human health.\nScarlet is authorised to assess and certify medical devices. We combine clinical, technical and regulatory expertise with AI agents and software so rigorous certification can keep pace with product development at the world’s most ambitious technology companies, without lowering the safety bar.\nOur customers have cut a year or more from their certification timelines for new AI-enabled medical devices and shortened product-update cycles from months to weeks. You’ll join a team building the infrastructure that makes these outcomes repeatable at scale.\nAbout the role\nAs Scarlet's first Security & Privacy Lead, you will own how we protect the information our customers trust us with. They share highly sensitive data with us, and keeping it safe is one of our most important responsibilities. Scarlet is growing fast, and our security and privacy programme has to keep up the pace.\nYou will own our ISO 27001-certified information security management system and our data privacy programme, and make them scale as we grow. You will work closely with engineering to find and fix risks early, and with teammates across Scarlet so that everyone, from new joiners to contractors, has a secure environment that works for them.\nYou will also shape how Scarlet adopts AI tools safely, assessing the threat vectors of new tools and helping build an internal ecosystem of AI tools that is secure by design.\nAs a certification body, we hold ourselves to high standards for information security and data privacy. Your work will help us meet them without slowing anyone down.\nResponsibilities\nOwn and improve Scarlet's ISO 27001-certified ISMS.\nOwn and improve Scarlet's GDPR-compliant data privacy programme.\nBe hands-on with implementing and maintaining controls.\nPerform information security and data privacy risk assessments for vendors and AI tools.\nHelp build Scarlet's internal ecosystem of AI tools, so that it is secure by design and lets colleagues use AI freely and safely.\nLead threat modelling with our engineers, commission external penetration tests and drive their findings to resolution.\nRepresent Scarlet's security and privacy to customers.\nProactively monitor our systems and operations to spot real vulnerabilities with practical consequences.\nRequired qualifications\nExperience owning an ISMS through ISO 27001 certification or surveillance audits.\nExperience running a GDPR compliance programme.\nA track record of being hands-on, implementing security controls yourself, not only advising others on them.\nEvidence of building a programme that scales. You've turned recurring compliance work, such as policy reviews, evidence collection or security questionnaires, into a repeatable process that handles growing volume without a matching increase in manual work.\nExperience assessing the information security and data privacy risks of third-party services.\nExperience working with engineers on threat models and penetration test remediation, with the technical judgement to read an architecture and challenge it.\nExperience explaining technical trade-offs clearly to non-technical colleagues and customers.\nPreferred qualifications\nExperience working in a highly regulated environment, such as medical devices or conformity assessment.\nExperience with SOC 2 or other security attestations.\nKnowledge of AI regulation and standards, such as the EU AI Act or ISO 42001.\nExperience administering or securing AI platforms or agent tooling in a business setting.\nExperience automating compliance work.\nThe interview process\nIntro chat with Niclas - 30 min (remote)\nCompliance knowledge chat with Tom - 30 min (remote)\nTechnical knowledge chat with Alan - 30 min (remote)\nCase with Niclas - 45 min (remote)\nCulture fit chats with James & Jamie - 20 min each (onsite)","description_format":"text","description_chars":3838,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Consumer Electronics","Health & Medical Electronics","Testing, Inspection & Certification","Digital Therapeutics"],"lifecycle":[{"event":"open","at":"2026-11-09T14:59:11Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":34,"reasons":["conf:0","win:early"],"computed_at":"2026-11-09T20:35:46Z"},"pay":{"stated_usd_annual":193675,"is_top_pay":true},"html_url":"https://alion.io/job/scarlet-security-privacy-lead","json_url":"https://alion.io/job/scarlet-security-privacy-lead.json","meta":{"generated_at":"2026-11-09T20:35:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7904,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3908732},"rest":"https://alion.io/mcp/rest/get_company?id=3908732"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fscarlet-security-privacy-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fscarlet-security-privacy-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fscarlet-security-privacy-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/scarlet-security-privacy-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fscarlet-security-privacy-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3967816}},{"tool":"search_jobs","arguments":{"company":"scarlet.cc","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3967816},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}