Senior Security Architect

About this role

<div class="content-intro"><p>Ohme is on a mission to accelerate the global transition to clean, affordable energy. We do that by serving as an integrated hardware and software smart-grid platform, focused on the residential EV charging market.</p> <p>The worlds of energy, transport and artificial intelligence are colliding and Ohme is at the heart of this new era. By using technology and data integrations to connect cars, chargers, people, energy providers and more, Ohme has a powerful platform that puts the consumer at the core.</p> <p>Ohme has been selling its chargers to consumers since mid 2019 and has had exponential growth since. We are now operating in multiple countries and have partnerships with the likes of VW, Mercedes, Octopus Energy, and other innovative brands.</p> <p>We are scaling up the business and are building out the team for rapid growth. If you’re interested joining a fast-growing cleantech venture on a data and AI-first journey to speed up the global transition to clean, affordable energy, read on!</p></div><h4>About the Role</h4> <p>We are looking for an experienced <strong>Senior </strong><strong>Security Architect</strong> to join our technology leadership team as the organisation’s senior security authority. Reporting directly to the CIO, you will define and own the security architecture framework, work hands-on alongside engineering teams, and provide governance and expert review of the way security is designed and implemented across the business.</p> <p>This is a senior individual contributor role — you will be the go-to security expert in the organisation, combining deep technical capability with the ability to communicate clearly at all levels, from engineers to board. You will help establish a culture of security by design, embedding best practice into every layer of the technology estate.</p> <p> </p> <h4>Key Responsibilities</h4> <h4>Security Architecture & Engineering</h4> <ul> <li>Define and maintain the organisation-wide security architecture framework, covering cloud, application, network, and data security.</li> <li>Work directly alongside engineering teams to embed secure-by-design principles into system design, infrastructure, and delivery pipelines (DevSecOps).</li> <li>Lead security architecture reviews for new projects, platforms, and third-party integrations.</li> <li>Own the AWS security posture — including IAM/SCPs, Security Hub, GuardDuty, CloudTrail, and Config — ensuring controls are robust, scalable, and well-governed.</li> <li>Define and enforce standards for identity and access management, secrets management, encryption, and network segmentation.</li> <li>Evaluate and recommend security tooling and services to strengthen the organisation’s security capabilities.</li> </ul> <h4>Governance & Compliance</h4> <ul> <li>Use ISO 27001 and related standards as the contextual framework for security governance, risk management, and policy development.</li> <li>Develop and maintain security policies, standards, and guidelines that are practical, enforceable, and aligned to the business risk appetite.</li> <li>Conduct regular risk assessments, threat modelling, and security reviews across the technology estate.</li> <li>Support audit, compliance, and assurance activities, including engagement with external assessors where required.</li> <li>Track and manage the security risk register, reporting on posture and remediation progress to the CIO and leadership team.</li> </ul> <h4>Communication & Stakeholder Engagement</h4> <ul> <li>Act as the primary security authority for internal stakeholders — translating complex security concepts for non-technical audiences.</li> <li>Build strong relationships with engineering, product, and operations teams to ensure security is seen as an enabler, not a blocker.</li> <li>Contribute to board-level and executive reporting on security posture, risk, and strategic initiatives.</li> <li>Stay current with the evolving threat landscape and emerging security technologies, sharing relevant insight across the organisation.</li> </ul> <h4>AI Security & Governance</h4> <ul> <li>Define and maintain a pragmatic AI security governance framework covering the adoption of large language model (LLM) services from providers such as Anthropic and OpenAI, AI-powered tooling, and agentic workflow platforms.</li> <li>Identify, assess, and clearly communicate the security risks specific to AI systems — including prompt injection, tool misuse, data exfiltration via model inputs, insecure agentic behaviour, and supply chain risk from third-party AI providers.</li> <li>Establish and enforce security standards for integrating LLM-based services into internal systems, covering API key management, data classification, model context boundaries, and output validation.</li> <li>Define governance standards for Model Context Protocol (MCP) server deployments, ensuring that AI agents operating with tool access are subject to appropriate authentication, authorisation, and audit controls.</li> <li>Champion a balanced approach to AI security — enabling engineering and product teams to adopt AI capabilities at pace while ensuring risk is understood, quantified, and appropriately managed. The objective is to enable progress, not restrict it.</li> <li>Embed AI security review into delivery and procurement processes, ensuring new AI integrations receive proportionate threat modelling without creating unnecessary friction for…