Security Engineer — IT, Data & AI

We move fast. We need someone who keeps it safe.

About ZURU

ZURU is on a mission to disrupt industries and challenge the status quo through innovation and automation. Our brands reflect this vision: ZURU Toys re-imagines play, ZURU Tech leads the next building revolution, and ZURU Edge creates modern FMCG brands for today’s consumers.

Founded in 2003 by EY Entrepreneur of the Year brothers Nick and Mat Mowbray, ZURU has grown to over 5,000 team members across 30+ international locations.

As one of the world’s largest toy companies, our award-winning brands include Bunch O Balloons, Mini Brands, XSHOT, Rainbocorns, and Smashers. Our FMCG portfolio features MONDAY Haircare, Rascals, NOOD, BONKERS, Gumi Yum Surprise, and more.

For more information, visit www.zuru.com.

Position Overview

We're building a security function to match that ambition. This is a hands-on engineering role for someone who wants to own security across a complex, fast-moving global organisation and grow into leading it.

This role has a clear growth path as the function matures. You'll have direct access to platform and AI decisions from day one — security embedded in how we build, not added at the end.

You'll report directly to the Head of IT, Data & AI. Independent by design. Security only works when it can speak freely.

What this is not:

• Not a governance role or a compliance checkbox exercise

• Not a CISO presenting slide decks to the board

• Not someone who raises tickets and waits for others to fix them

Who you are:

Probably 3–6 years in security or cloud security engineering. Technically sharp. Opinionated about what good looks like. You want to build something — not inherit a mature program. You can have a direct conversation with an engineer about a configuration decision without creating an enemy. You move fast and document what you do.

Roles & Responsibilities

• Identity and collaboration security: M365, Entra ID, SharePoint, Teams. How 5,000 people share information across 30 offices is your domain. Conditional Access, DLP, RBAC, external sharing, you understand these cold and you know what good looks like at scale.

• Cloud security: We run data and AI workloads on AWS. Security Hub, GuardDuty, IAM, cloud security posture — you're comfortable here and you'll extend our coverage as the platform grows.

• Platform and data security: Our data platform are production systems. You'll embed security into how they're built and operated, not bolt it on after.

• Security foundations: Policy that people can actually follow. An incident response capability that's tested, not theoretical. A risk posture you can brief the COO on in 10 minutes. You'll build these from the ground up.

Skills & Experience

• Hands-on M365 security experience — Entra ID, Conditional Access, DLP, SharePoint, Defender

• AWS security — Security Hub, GuardDuty, IAM

• You've found real vulnerabilities, not just run scanners

• You write clearly — policy people read, not policy that sits in a folder

• You work well without a fully-formed team around you

• Bonus: Databricks or data platform security experience

• Bonus: Security in a global, multi-entity environment

• Bonus: Experience building security programs at growth-stage companies

LIFE@ZURU

At ZURU, we have cultivated a high-performing culture that encourages excellence. Our team works towards ambitious goals, learning, performing, and improving together, all while having fun. We empower talented individuals to do their best work every day.

At ZURU, you get out what you put in. You are responsible for driving your own career and we provide the platform to achieve it. As ZURU is on such a fast growth trajectory, there are opportunities here that you won’t find anywhere else.

We recognise that ZURU’s success stems from our people and you can only be at your best when you are looking after yourself. ZURU encourages all our team members to invest in their wellbeing by providing an array of benefits and tools.

ZURU – Tomorrow Reimagined

ZURU.com

#LI-FR1