Security Engineer – IT, Data & AI

About ZURU

ZURU is dedicated to revolutionizing industries through innovation and automation. Our diverse brands span from ZURU Toys, redefining play, to ZURU Tech, pioneering advances in building technologies, and ZURU Edge, crafting contemporary FMCG products. Since our founding in 2003 by entrepreneurs Nick and Mat Mowbray, ZURU has expanded to over 5,000 employees across more than 30 global offices. Our renowned toy brands include Bunch O Balloons, Mini Brands, XSHOT, Rainbocorns, and Smashers, alongside FMCG products such as MONDAY Haircare, Rascals, NOOD, BONKERS, and Gumi Yum Surprise.

Position Overview

We are establishing a dedicated security team to support our ambitious growth. This role is hands-on, offering ownership of security across a complex, fast-paced international organization, with opportunities for leadership progression. Security will be integral to platform and AI strategy from the outset, not an afterthought. Reporting directly to the Head of IT, Data & AI, this position is designed to operate independently, enabling candid and effective security advocacy.

Role Clarifications

• This is not a governance-focused or compliance-driven role.
• It does not involve board-level presentations or executive reporting.
• The role requires proactive resolution rather than ticket generation and delegation.

Who You Are

You likely have 3 to 6 years of experience in security or cloud security engineering. You are technically adept, with strong opinions on security standards and practices, eager to build a security function from the ground up rather than manage an established program. You communicate with engineers collaboratively about configurations, are quick to act, and maintain thorough documentation.

Key Responsibilities

• Manage identity and collaboration security across our 5,000 staff and 30 offices, including M365, Entra ID, SharePoint, and Teams environments. Ensure best practices on Conditional Access, Data Loss Prevention, Role-Based Access Control, and controls on external sharing at scale.
• Oversee cloud security for AWS-hosted data and AI workloads, utilizing tools like Security Hub, GuardDuty, and IAM to extend protection as our platform evolves.
• Integrate security into our data platforms and production systems, ensuring security is embedded in design and operations rather than appended later.
• Develop foundational security policies that are practical and easy to follow, build and test incident response capabilities, and maintain a risk posture briefable to the COO within 10 minutes.

Required Skills & Experience

• Proven hands-on expertise with M365 security services including Entra ID, Conditional Access, Data Loss Prevention, SharePoint, and Defender.
• Strong experience securing AWS environments, specifically using Security Hub, GuardDuty, and IAM.
• Demonstrated ability to identify genuine vulnerabilities beyond automated scanning tools.
• Excellent written communication skills, producing security policies that are clear, readable, and actionable.
• Ability to function autonomously without extensive team infrastructure.

Preferred Qualifications

• Experience with Databricks or securing data platforms.
• Background in securing global, multi-entity organizations.
• Prior involvement in developing security programs for growing companies.

Life at ZURU

At ZURU, we foster a culture of high performance and continuous improvement, aiming for ambitious targets while maintaining a fun and engaging workplace. Employees are empowered to take ownership of their careers and develop within a rapidly growing environment. We recognize that our success depends on our people being at their best, encouraging well-being through extensive benefits and resources.

Company Vision

ZURU represents a future-oriented organization committed to transforming industries through innovation and bold ideas.