Head of Security (London, Hybrid)

Location: London Office/Hybrid
Schedule: Full-Time

The Role

Most security roles protect data. This one protects evidence. Asset Reality builds mission-critical infrastructure for clients in law enforcement and government,operatingin environments where records are examinedadversariallyand the stakes are high.

You will own security across the company: architecture advisory to engineering, corporate IT and endpoint security, and the client-facing security and compliance relationship. This is a first-in-function role. There is no team on day one.

Responsibilities

• AdviseEngineering on security architecture. You will not write production code. You willparticipatein design and architecture reviews, assess proposed decisions, and document your positions.
• Own the corporate security estate: identity and access management, device management, network security,emailand collaboration tooling configuration.
• Support and advise the IT manager, who owns day-to-day IT operations and reports separately to the CTPO.
• Own the security posture presented to clients: security questionnaires, due diligence responses, clientauditsand assessments.
• Own the company’s security policy set, security awareness programme, and vendor security review process.
• Own incident response: define the process, run the exercises, lead the response.
• Own the compliance roadmap and act as internal owner for external assessors and advisory partners.
• Define and report security metrics to thesecurityreviewboard quarterly.

Essential Experience

• Five or more years in security, including two or more at a level where you set direction rather than execute someone else’s.
• Demonstrable ownership of cloud security architecture in a production environment. AWS or GCP. You should be able to reason about IAM design, network segmentation, secrets management, and data isolation in a multi-tenant system without reaching for a reference.
• Direct experience of a formal security or compliance regime as an owner or significant contributor — SOC 2 Type II, ISO 27001, FedRAMP, or a government assurance framework.
• Experiencerepresentingsecurity to external parties: enterprise client security teams, auditors, assessors, or regulators. You have sat in the uncomfortablemeetingand it went acceptably.
• Practical ownership of corporate IT security: MDM, SSO, endpoint hardening, joiner-mover-leaver process.
• Threat modelling as a practised discipline rather than an occasional exercise.
• Sufficient engineering literacy to read a backend codebase, follow a schema design, and hold a credible argument with a senior engineer about either.

Desirable

• Experience in a domain with irreversible, high-value transactions: digital asset custody, payments infrastructure, finance, or similar.
• Direct experience driving a US federal authorisation, particularly FedRAMP Moderate, at a company under 100 people.
• Familiarity with Go.
• Experience as the first security hire, or the first senior security hire, somewhere.
• Detection and response tooling experience.

About Asset Reality

Asset Reality provides the infrastructure needed to manage seized and operational assets end‑to‑end. Our Platform combines a global system of record with government‑grade digital asset custody infrastructure, replacing fragmented legacy workflows across physical and digital asset lifecycles. Already trusted by agencies and regulated practitioners worldwide to handle more than 1,500 seizures and $1 billion in seized asset transactions, our Platform supports complex, high‑sensitivity, cross‑jurisdictional workflows with strict security, auditability, and compliance.

By standardising processes from seizure to disposal and sourcing to deployment, Asset Reality is the modern infrastructure layer underpinning asset recovery and criminal disruption, improving outcomes for victims and governments.

Are you excited by the idea of building new solutions from the ground up? At Asset Reality, we are passionate about solving the challenges of asset recovery, and we want to grow our team with others who share that passion. We offer competitive salary, benefits, and commission, and as an early-stage startup, we provide a unique opportunity for financial reward that goes beyond the monthly salary through equity. Learn more at

Privacy Notice

Asset Reality will process the personal information you provide as part of your application, including your CV, contact details, employment history, qualifications, and recruitment-related communications, for the purposes of assessing your suitability for employment, managing the recruitment process, and meeting legal obligations. We retain recruitment records for up to 12 months following completion of the recruitment process unless a different retention period is required by law. By submitting an application, you acknowledge that you have read and understood our Candidate Privacy Notice. For questions about how we process your personal information, please contact

#J-18808-Ljbffr

Full job description from WhatJobs. Apply for this role →