Director of Information Security & AI Governance

Responsibilities

• Information Security
• Own Flagstone's information security strategy, aligned to our regulatory obligations and risk appetite
• Lead and develop the InfoSec team, driving ISO 27001 to certification and building the programme to sustain it
• Own our security posture across Microsoft 365, incident response, vulnerability management, and third-party risk
• Work closely with the Head of GRC to embed security controls within the broader risk framework
• AI Governance
• Own the AI governance framework - policy, risk classification, tool approval, and ongoing oversight of AI adoption across the business
• Chair an AI governance forum across engineering, product, risk, compliance, and legal
• Work hands-on with the tooling - we're already deploying LLM integrations and agentic workflows, and governance needs to work in practice, not just on paper
• Internal Technology Strategy
• Lead the strategic question at the heart of this role: what does world-class internal technology look like when AI changes the economics of building?
• Own the vision for how Flagstone builds, buys, and operates internal technology, and make the case for change where the evidence supports it
• Lead the IT function: end-user computing, device management, network infrastructure, and internal tooling for a hybrid workforce

Requirements

• A hands-on background in information security, where you've built or scaled a security programme, not just inherited one
• Real experience owning both IT and security, with the judgement to know when to be strategic and when to roll your sleeves up
• ISO 27001 implementation or programme ownership experience
• Genuine enthusiasm for AI and how it's changing the way businesses operate - you use the tools yourself, you follow the space, and you have a credible point of view on where it's going
• Working knowledge of AI governance, with the intellectual curiosity and learning velocity to develop it fast
• Director level people leadership across multi disciplinary teams, with the presence to operate at board level and with regulators
• Commercial instinct on build-vs-buy - you understand total cost of ownership and when building creates durable advantage
• Experience in a regulated environment, ideally fintech, payments, or financial services would be preferred
• Backgrounds we're interest in
• We're deliberately open on background for this one. Whether you've come up through InfoSec, IT, engineering, or a combination of all three. What matters is that you've been close to the work, you've built things, and you're genuinely excited about where AI is taking internal technology.
• We'd love to hear from people who have worked in product led, regulated businesses where the pac

Benefits

Additional Information

What is Flagstone? Flagstone is many things. An online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash. A diverse group of people, bound by a collaborative spirit, and shared purpose. And lastly, a thriving, profitable business - where smart people do their best work. Each definition shares a common thread: our unique culture. It's our pride and joy. And our competitive advantage. A feel for our culture: To revolutionise the savings market, we need to be at our best. But high performance takes more than talent - it takes a culture of kindness, respect, and growth. That's why we're building a diverse, inclusive community, where your voice is heard and valued. Where, with close support and room to develop, you can surpass even your own expectations. And be rewarded for it. We may not change the world, but we can change the world of financial technology. And all it takes is a winning mix of drive, talent, and empathy. Our culture celebrates all three. But enough about us. Let's talk about you. Does this sound like you? You're a senior technology leader with a hands-on background in information security, and you've spent your career building things, not just governing them. You understand that in a world where AI is reshaping how businesses operate, security and governance aren't a brake on progress, they're what make progress sustainable. You're genuinely excited by AI. You use it in your own work, you follow where it's going, and you understand both the opportunity and the risk it presents in a regulated environment. You don't need a fully formed AI governance framework on your CV, but you need the mindset, the curiosity, and the conviction to build one. You're comfortable with ambiguity, energised by a blank sheet, and ready to shape what a world class internal technology function looks like when the economics of building software are changing fast.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at flagstone? Share your experience