Build the platform that proves it's under control.

For our clients: you'll lead assessments for critical infrastructure and government clients against SOCI, CIRMP, AESCSF and ISM, with the Synalogic platform carrying the documentation so your time goes into findings that matter. You'll be the credible domain voice alongside our commercial team, and the person a client's risk executive calls when they need a straight answer.

For Synalogic: you'll be our internal compliance owner. That means accountable ownership of our ISO 27001 certification programme and our ISO 42001 AI management system, which we run as the reference implementation of what we sell. You'll direct our outsourced ISMS support, own surveillance audits, client security questionnaires and privacy assessments, and keep our controlled-document set honest as the company grows.

We're looking for someone who has done regulatory assessments inside an energy, water, transport or government environment, has operated or audited a management system from the inside, and is comfortable being the most senior assurance person in the room, on either side of the table.

For our clients: you'll stand up and tune each customer's dedicated environment, be the technical voice when a client's security or architecture team has questions, and make sure the platform performs on live engagements. When an assessment or recovery engagement needs the platform to do something new, you'll be the one who makes it happen.

For Synalogic: you'll take ownership of the platform and lead its engineering as the team grows around you. It runs on Google Cloud with a dedicated project per customer, Python services, and applied LLM pipelines over a compliance domain model. You'll drive its evolution, hold the codebase controls behind our ISO 27001 and 42001 alignment, and build the internal tooling and automation that lets a small team run like a bigger one.

We're looking for a strong generalist with real GCP and Python depth, an interest in making AI systems reliable and auditable rather than just impressive, and the temperament to own a production platform end to end and build a team behind it.

For our clients: you'll open doors with new organisations across utilities, critical infrastructure, government and financial services, take them through a proof-of-concept, and make sure the handover into delivery is clean. You'll be the person who turns interest into a scoped, signed first engagement.

For Synalogic: you'll build and run our revenue engine. We have a defined qualification method, pipeline model and CRM specification; you'll operate them, keep the data clean, and improve them. You'll own outbound prospecting, tender and panel responses, the partner channel with advisory and cloud partners, and the reporting that tells the business what's really in the pipeline. Our advisors and founder bring relationships; you bring the system that converts them.

We're looking for someone who has sold GRC, cyber assurance or compliance services into regulated buyers, is comfortable prospecting into organisations where we have no existing relationship, and has the discipline to run a sales operation rather than just work a network.

For Synalogic: you'll lead our commercial operations. Statements of work, master services agreements, pricing models, invoicing and revenue recognition, vendor and subcontractor management, and the commercial side of tenders and supplier panels. You'll make sure Synalogic's own contracts are as tight as the ones we audit for clients, and you'll build the commercial bench we'll need when large engagements land.

For our clients: our Commercial Recovery practice finds revenue and cost that has leaked from contracts across customer and supplier relationships, and recovers it. You'll be a hands-on analyst on those engagements: analysing contracts and transaction data, building recovery claim packs, and working with client finance and procurement teams to realise them, with the platform doing the reconciliation. You'll also be the heaviest user of our recovery module and will shape how it works.

We're looking for people from commercial management, contract compliance, forensic accounting, procurement audit or revenue assurance backgrounds who understand how consulting engagements are contracted and billed, like working with messy data, and can hold their own with a client's CFO. We're building a bench for large engagements, so contractors and part-timers are welcome for the recovery stream.