Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this VP Information Security role.

Rezi rewrites your resume against Carbon3.ai's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the VP Information Security posting at Carbon3.ai — free, in seconds.

About the Role

The VP, Information Security leads Era4's Information Security group, responsible for internal and external security risk across the company's IT estate and setting security policy for operational technology networks. This role is crucial for leading security through the build and go-live of Era4's next production sites and will grow into a significant security function as the business scales. The position reports to the CTO and partners closely with other key teams, combining hands-on execution with customer-facing credibility to support Era4's AI mission.

Responsibilities

Lead and grow the Information Security group, including detection and response, threat intelligence, application security, and GRC.
Own internal and external security risk, governance, and metrics, reporting monthly to the executive team.
Build a scalable security operating model, tooling, and processes, including managed detection and response.
Embed secure-by-design practices through threat assessments and design reviews.
Own security architecture for AI and HPC platforms, including GPU infrastructure and Kubernetes.
Set tenant isolation standards for multi-tenant and bare metal GPU environments.
Lead cloud, network, identity, and platform security based on zero-trust principles.
Oversee monitoring, detection, incident response, and key management.
Set security policy for OT networks, ensuring segmentation from IT under a unified incident process.
Own hardware, supply chain, and third-party security for vendors and partners.
Support corporate IT security.
Maintain the cyber-risk framework, threat models, and risk registers.
Own the certification program, starting with Cyber Essentials Plus and SOC 2.
Align controls with the NCSC Cyber Assessment Framework and conduct regular penetration testing.
Ensure compliance with UK data protection, sovereign AI expectations, and data centre regulations.
Act as the accountable executive for security incidents.
Lead customer security engagement, including questionnaires and contractual terms.
Act as the senior security authority with customers, partners, and regulators.
Advise the CTO and COO on risk and trade-offs.
Shape the future security organization and build a pragmatic security culture.

Requirements

Senior security leadership experience in private-sector, high-growth companies (AI-native, neoclouds, GPU cloud providers, data centre operators, or high-tech product companies).
Experience implementing and scaling an initial security operating foundation at a start-up or scale-up.
Proven ownership of security architecture and operations across cloud, network, identity, and compute, utilizing secure-by-design and zero-trust principles.
Experience securing AI, HPC, GPU, or large-scale compute infrastructure with privileged customer access, including tenant isolation, firmware/BMC security, and shared responsibility boundaries.
Strong grounding in monitoring and incident response, including managing outsourced SOC/MDR providers and leading live incidents.
Ability to translate security risk into clear business decisions and report at the executive level.
Comfortable operating with a small team, growing it, and representing security externally.
Experience leading SOC 2 Type II or equivalent security certification, ideally in regulated environments.
Experience supporting enterprise sales through customer due diligence and audits.
Experience setting security policy for OT networks in data centres or critical facilities.
Private-sector experience in critical-infrastructure or sovereign AI contexts.
Exposure to sustainability-led technology or energy-aware infrastructure.
Eligible for UK Security Check (SC) clearance.

Skills

Information Security
Risk Management
Governance
Metrics Reporting
Security Operating Model
Tooling
Processes
Managed Detection and Response (MDR)
Secure-by-Design
Threat Assessments
Design Reviews
Security Architecture
AI Platforms
HPC Platforms
GPU Infrastructure
Kubernetes
Tenant Isolation
Firmware Security
BMC Security
Cloud Security
Network Security
Identity Security
Zero-Trust Principles
Data-Centric Controls
Sovereignty Controls
Monitoring
Incident Response
Key Management
OT Network Security
Hardware Security
Supply Chain Security
Third-Party Security
Cyber-Risk Framework
Threat Models
Risk Registers
Certification Programs
Cyber Essentials Plus
SOC 2
NCSC Cyber Assessment Framework
Penetration Testing
UK Data Protection
Sovereign AI
UK Cyber Resilience Regulation
Customer Security Engagement
GRC

Location

Remote

Work Type

Full-time

Experience Level

Senior
VP

About the Company

Era4 is a mission-driven, high-growth start-up building critical national infrastructure.
Operational excellence directly enables growth.
The company is focused on sovereign and sustainable AI.

Equal Opportunity

Era4 is an equal opportunity employer.
We celebrate diversity and are committed to creating an inclusive environment for all employees.