> Markdown version of [/jobs/ext/1212129-director-of-information-security-ai-governance](https://www.wearedevelopers.com/jobs/ext/1212129-director-of-information-security-ai-governance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director of Information Security & AI Governance - **Company:** Flagstone - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Artificial Intelligence, Cyber Security, Information Technology Operations, Network Architecture, User Environment Management, Software Vulnerability Management, Large Language Models - **Published:** July 9, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=4414037c7e22bf8f ## About the Role * A hands-on background in information security, where you've built or scaled a security programme, not just inherited one * Real experience owning both IT and security, with the judgement to know when to be strategic and when to roll your sleeves up * ISO 27001 implementation or programme ownership experience * Genuine enthusiasm for AI and how it's changing the way businesses operate - you use the tools yourself, you follow the space, and you have a credible point of view on where it's going * Working knowledge of AI governance, with the intellectual curiosity and learning velocity to develop it fast * Director level people leadership across multi disciplinary teams, with the presence to operate at board level and with regulators * Commercial instinct on build-vs-buy - you understand total cost of ownership and when building creates durable advantage * Experience in a regulated environment, ideally fintech, payments, or financial services would be preferred ## Description Flagstone is at a genuine inflection point in how it thinks about technology, security, and AI, and this role is at the centre of it. As Director of Information Security & AI Governance, you'll report directly to the CTO and own three things that sit at the heart of how we grow, with IT Operations as part of your broader remit: Information Security * Own Flagstone's information security strategy, aligned to our regulatory obligations and risk appetite * Lead and develop the InfoSec team, driving ISO 27001 to certification and building the programme to sustain it * Own our security posture across Microsoft 365, incident response, vulnerability management, and third-party risk * Work closely with the Head of GRC to embed security controls within the broader risk framework AI Governance * Own the AI governance framework - policy, risk classification, tool approval, and ongoing oversight of AI adoption across the business * Chair an AI governance forum across engineering, product, risk, compliance, and legal * Work hands-on with the tooling - we're already deploying LLM integrations and agentic workflows, and governance needs to work in practice, not just on paper Internal Technology Strategy * Lead the strategic question at the heart of this role: what does world-class internal technology look like when AI changes the economics of building? * Own the vision for how Flagstone builds, buys, and operates internal technology, and make the case for change where the evidence supports it * Lead the IT function: end-user computing, device management, network infrastructure, and internal tooling for a hybrid workforce ## Related Videos - [AI-Augmented DevOps with Platform Engineering](https://www.wearedevelopers.com/videos/1614-ai-augmented-devops-with-platform-engineering) - [Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing](https://www.wearedevelopers.com/videos/100108-building-sovereign-ai-lessons-from-deploying-secure-rag-systems-using-confidential-computing) - [Fake or News: Translating Dog Barks, Notepad Gets an Upgrade and Michelin-Star Robots - Paul Tregoing](https://www.wearedevelopers.com/videos/1802-fake-or-news-translating-dog-barks-notepad-gets-an-upgrade-and-michelin-star-robots-paul-tregoing) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [Future-Proofing FinTech With Blockchain Technology](https://www.wearedevelopers.com/videos/808-future-proofing-fintech-with-blockchain-technology) ## Related Articles - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere) - [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)