Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Platform Security & Compliance Lead (Contract)

AND Digital

Where
London, England, United Kingdom
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPlatform Security & Compliance Lead (Contract)AND Digital · London, England, United Kingdom

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on AND Digital's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 3 days ago

The posting

Principal Security & Compliance Lead (3 Month Contract)

Location: London 1-2 days per week onsite

Who We Are: AND Digital are a tech company focused on accelerating digital delivery and dedicated to closing the digital skills gap. We’ve been helping organisations build better digital products and stronger digital teams since 2014.

We believe our work should always leave a legacy for the client. We do this through close relationships with our offices (or ‘Clubs’) so that our partners are always prioritised by a regional team close to them.

This unique model has driven success for our clients and ourselves, evidenced by our remarkable organic growth since 2014. Today we number more than 1,300 people with Clubs all over the UK and Europe with plans for global expansion in the next couple of years.

Join us - and help us fulfil our mission to close the world’s digital skills gap.

The Role

We are seeking an experienced Platform Security & Compliance Lead to address an existing operational gap and strengthen security, governance and cost management across our AWS cloud platform.

This role will combine hands-on cloud engineering expertise with security and compliance leadership, focusing on improving access controls, establishing secure application development patterns, embedding governance best practices and optimising AWS cloud spend.

The ideal candidate will bring a strong understanding of AWS infrastructure, cloud security and penetration testing, with the ability to identify risks, implement pragmatic solutions and drive continuous improvement across the platform.

Key Responsibilities

Platform Security & Access Control

  • Review and strengthen AWS access controls, IAM policies, roles and permissions, applying least-privilege principles.
  • Identify and remediate security vulnerabilities, misconfigurations and gaps in existing cloud infrastructure.
  • Improve identity and access management practices, including privileged access and secrets management.
  • Establish and maintain security standards and guardrails across the platform.

Application Security & Secure Engineering

  • Define and promote secure application development patterns and cloud-native security best practices.
  • Embed security controls into CI/CD pipelines and infrastructure-as-code workflows.
  • Work with engineering teams to identify and address application and infrastructure security risks.
  • Apply knowledge of penetration testing, vulnerability assessment and threat modelling to improve the platform's security posture.

Governance, Risk & Compliance

  • Strengthen platform governance, ensuring security controls and engineering practices align with relevant compliance requirements.
  • Establish clear standards, policies and processes for cloud security and operational risk management.
  • Support security reviews, audits, remediation tracking and evidence gathering.
  • Improve documentation, ownership and accountability for security-related operational processes.

AWS FinOps & Operational Efficiency

  • Review AWS usage and expenditure to identify opportunities for cost optimisation.
  • Implement cost visibility, monitoring, tagging and resource governance practices.
  • Balance cost efficiency with security, reliability and performance requirements.
  • Promote accountability for cloud spend and sustainable platform operations.

Technical Leadership & Continuous Improvement

  • Take ownership of identified operational gaps and drive them through to resolution.
  • Work collaboratively with platform, cloud infrastructure, application engineering and security teams.
  • Provide technical guidance on cloud security, secure engineering practices and governance.
  • Develop repeatable processes and automation to reduce operational overhead and improve consistency.

Why join AND Digital?

We have three values: wonder, share, and delight. These values inform how we work with clients, and our culture: what it feels like to work for AND. We believe collaboration, ambition, curiosity and fun can drive innovation by creating a better environment for problem-solving.

By joining AND, we’ll provide:

  • Opportunities to work on projects with big clients and the chance to produce meaningful work that makes a difference to people’s lives.
  • A “Blended Working” model, meaning you will be able to work in a range of locations from; your home, in your clubhouse, on a client, as well as just a change of scenery.
  • A dedicated career scrum team, designed to help you reach your career goals and develop the skills you need to be your best self.
  • An annual budget for training and upskilling, including allocated days off so you don’t have to study in your own free time.
  • Monthly and quarterly team socials - on us - ranging from after work drinks, to driving experience days with your fellow club members.
  • A safe environment for you to be yourself and challenge yourself.

Equal Opportunities Statement

At AND Digital we embrace diversity and are committed to equal opportunities. We are actively recruiting for a diverse and inclusive workforce so want to ensure we do everything we can to support your application.

We want you to feel safe and empowered to let us know if you require any adjustments to be made to your application or interview process so please speak to our recruitment team.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against AND Digital's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on AND Digital's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    AND Digital's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.