Thales is a global technology leader with more than 83,000 employees on five continents. With over 7,500 people in the UK, operating across defence, space, aerospace, and digital security, we help build a future we can all trust. Thales supports the security and stability of our nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services.
AI Assurance Manager
Crawley - Hybrid
You will be part of and responsible for driving a strong AI culture within the newly formed Enterprise AI Team. This will include leading the embedding best practice within the development teams (including ‘Secure by Design’ principles), contributing to use case development, developing AP tools, defining & supporting governance and taking a leading role in the AI assurance.
Key Responsibilities:
- Lead vulnerability management activities working closely with the Enterprise AI team to initiate remedial action where required, utilising “Secure by Design” Principles.
- Develop security requirements, epics and stories, along with guidance & governance to squads to ensure data protection and data security are included in the scope of new and existing data & digital products
- Work collaboratively with other team member to ensure proposed solutions provide the required level of security assurance in line with data processing requirements, as well as Thales and customer risk appetites.
- Embedding the latest security best practice within the development team enabling the principle of ‘everyone being responsible for security’.
- Support the delivery of technical security measures, to ensure successful and timely system accreditations and re-accreditations.
- Be central point of contact for all UK Digital Competency Centre technical security matters and concerns, supporting Enterprise AI team throughout the development lifecycle and engaging with key security stakeholders inc. UK Head of Information Assurance.
- Responsibility for developing, implementing and conducting formal and regular technical risk assessments of Thales’ DCC environment, recommending remedial action where required, utilising “Secure by Design” Principles.
- Assist with the deployment and implementation of security related initiatives
Essential Skills:
- Extensive and proven experience in providing technical security support across a diverse range of systems and applications.
- Capability to analyze and advise on security implications for both new and existing systems/applications, including all proposed changes.
- Proficient in interpreting detailed system design documentation to identify potential security risks and devise effective mitigation strategies for secure and compliant solutions.
- Commitment to ensuring security activities align with compliance requirements, enabling Security Architecture and Services to manage risk while maximizing business value.
- Strong verbal and written communication skills with the ability to convey complex technical security concepts clearly to management, clients, and team members at all levels.
Desirable Skills:
- Measurable experience covering fundamental security technical design principles.
- Experience conducting formal risk assessments and preparing Risk Management and Accreditation Documentation (RMADS) in compliance with UK Government policies.
- Proven track record in delivering technical security support for a variety of systems and applications.
- Experience acting as a formal stakeholder in security-related change control processes.
- Familiarity with security frameworks such as Cyber Essentials Plus, ISO27000 series, NIST-800 (including SP800-37 and SP800-53), and associated assurance activities.
Essential Experience:
- Possession of recognized security certifications such as CISSP, CISM, CCSK, or equivalent.
- Demonstrated understanding of cloud technologies and Infrastructure as Code (IaC).
- Proven application of security principles within Agile delivery frameworks.
- Experience assessing and managing technical security risks effectively.
- Ability to provide expert technical security advice to various business units and contribute to maintaining security risk registers.
- Up-to-date knowledge of current and emerging security technologies.
- Experience in reviewing and updating security policies and procedures.
Security Clearance Requirement:
Due to the nature of the work that we do at Thales, many of our roles are subject to security restrictions. This role requires Security Clearance (SC). It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant undergo, achieve, and maintain SC Clearance prior to commencing employment.
To be eligible for full SC, you generally need to have resided in the UK for the last 5 years. In some circumstances, a minimum of 3 years’ residence in the UK over the last 5 years may be accepted, with additional overseas checks.
Please visit the UKSV website for further guidance: https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels/national-security-vetting-clearance-levels.
Connect with Fiona Tal, Talent Acquisition Partner #LI-FT1 who is eager to explore together with you this exciting opportunity.
At Thales, we ensure equal opportunities, pay and working conditions for all. The benefits we offer include private medical insurance, buying or selling annual leave, cycle to work schemes, employee discounts, paid volunteering day, stocks and shares, annual bonus and much more depending on the role. Read more about our benefits here.
We are committed to creating a workplace where everyone feels valued for who they are and the unique strengths they bring. Discover more about our programmes, employee networks, wellbeing policies, and inclusive features here.
If this role isn’t quite right for you, we encourage you to join our talent community where your details will be shared with our recruitment teams for other potential opportunities.
Join the Talent Community here.
Join Thales in the UK – Innovate with us and shape the future!
At Thales, we ensure equal opportunities, pay and working conditions for all. The benefits we offer include private medical insurance, buying or selling annual leave, cycle to work schemes, employee discounts, paid volunteering day, stocks and shares, annual bonus and much more depending on the role. Read more about our benefits here.
We are committed to creating a workplace where everyone feels valued for who they are and the unique strengths they bring. Discover more about our programmes, employee networks, wellbeing policies, and inclusive features here.
If this role isn’t quite right for you, we encourage you to join our talent community where your details will be shared with our recruitment teams for other potential opportunities. Join the Talent Community here.
Join Thales in the UK – Innovate with us and shape the future!
Skills Required
- Extensive and proven experience providing technical security support across diverse systems and applications
- Ability to analyze and advise on security implications for new and existing systems and applications
- Ability to interpret detailed system design documentation, identify security risks, and develop mitigation strategies
- Ability to align security activities with compliance requirements and risk management objectives
- Strong verbal and written communication skills for explaining technical security concepts
- Recognized security certification such as CISSP, CISM, CCSK, or equivalent
- Understanding of cloud technologies and Infrastructure as Code
- Experience applying security principles within Agile delivery frameworks
- Experience assessing and managing technical security risks
- Ability to provide expert technical security advice to business units and maintain security risk registers
- Up-to-date knowledge of current and emerging security technologies
- Experience reviewing and updating security policies and procedures
- Experience with fundamental security technical design principles
- Experience conducting formal risk assessments and preparing RMADS under UK Government policies
- Experience acting as a stakeholder in security-related change control processes
- Familiarity with Cyber Essentials Plus, ISO 27000 series, NIST SP 800-37, and NIST SP 800-53
Thales Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Thales and has not been reviewed or approved by Thales.
-
Retirement Support — Retirement plans with employer contributions and matches, profit sharing, and share purchase opportunities are emphasized across multiple regions. These elements are positioned as competitive components of total rewards.
-
Leave & Time Off Breadth — Generous PTO that increases with tenure, paid holidays, and paid military, maternity, and paternity leave are described. This breadth supports work–life balance across locations.
-
Flexible Benefits — Hybrid work options, flexible schedules, and parental supports such as childcare benefits and leave for sick children are available in several markets. Flexibility is presented as a core part of the employee experience.
Thales Insights
What We Do
Thales is a global high technology leader investing in digital and “deep tech” innovations – connectivity, big data, artificial intelligence, cybersecurity and quantum technology – to build a future we can all trust, which is vital to the development of our societies. The company provides solutions, services and products that help its customers – businesses, organisations and states – in the defence, aeronautics, space, transportation and digital identity and security markets to fulfil their critical missions, by placing humans at the heart of the decision-making process.
