Data & AI Security Engineer

At the heart of everything we do is our vision to change lives every day, and our mission to grow The National Lottery responsibly and champion its impact. We are Allwyn UK, part of the Allwyn Entertainment Group - a multi-national lottery operator with a market-leading presence across the USA (Michigan and Illinois) and Europe, including Czech Republic, Austria, Greece, Cyprus and Italy. While the main contribution of The National Lottery to society is through the funds to good causes, at Allwyn we put our purpose and values at the heart of everything we do. Join us as we embark on a once-in-a-lifetime, largescale transformation journey by creating a National Lottery that delivers more money to good causes. We'll talk a bit more about us further down the page, but for now - let's talk about the role and who we're looking for...

A bit about the role Working within Allwyn's Data & AI function, the Data & AI Security Engineer is responsible for embedding security architecture and risk management directly into the design and delivery of Allwyn's data platforms, analytics capabilities, and AI initiatives. The role has a dotted‑line relationship into Enterprise Security, ensuring alignment with Allwyn's security strategy, standards, and risk appetite, while operating day‑to‑day as a trusted security architecture partner to Data & AI delivery, engineering, and product teams. The role exists to enable Data & AI teams to move quickly and safely, ensuring that platforms such as AWS Redshift, Reporting(Power BI), AWS Data platform systems and AI workloads are secure by design, compliant by default, and resilient at scale.

What you’ll be doing

• Embedded Security Architecture & Engineering (Data & AI) Act as the embedded security architect within Data & AI, shaping solutions from discovery through design and delivery.
• Lead the definition and application of security architecture patterns for AWS‑hosted data and analytics platforms, with a focus on Amazon Redshift, data pipelines, and supporting services.
• Define secure architectural approaches for AI and advanced analytics workloads, including data ingestion, model training, experimentation, inference, and integration into downstream services.
• Ensure designs address key security concerns such as data protection, identity and access management, encryption, environment segregation, monitoring, and resilience.
• Security Assurance & Risk Management Provide proactive security architecture assurance to Data & AI initiatives, ensuring early engagement and secure‑by‑design outcomes.
• Produce and maintain security artefacts including threat models, architectural risk assessments, solution security designs, and control definitions.
• Identify, articulate, and manage security risks arising from data usage, analytics, and AI adoption, supporting informed decision‑making where trade‑offs are required.

Alignment with Enterprise Security

• Maintain strong alignment with Enterprise Security through a dotted‑line relationship, ensuring consistency with: Security strategy and standards Risk appetite and governance expectations Regulatory and compliance obligations
• Contribute to the evolution of enterprise security patterns, standards, and guidance based on practical experience from Data & AI delivery.
• Act as a trusted bridge between Data & AI teams and Enterprise Security, translating requirements in both directions in a pragmatic and delivery‑focused way.

Stakeholder Collaboration & Influence

• Partner closely with Data Engineering, AI, Cloud Engineering, Architecture, and Product teams to influence design decisions and promote security‑first thinking.
• Engage confidently with senior technical and business stakeholders, explaining security risks and recommendations in clear, outcome‑focused terms.
• Support capability uplift by coaching engineers and architects on cloud, data, and AI security principles.

What experience we're looking for

• Proven experience operating as a Security Architect or senior security advisory practitioner within complex, cloud‑based environments.
• Strong practical experience securing AWS‑hosted data platforms, including Amazon Redshift and related analytics services.
• Demonstrable understanding of security architecture principles across: Cloud and platform security Data platforms and data pipelines Identity and access management Encryption and key management
• Experience assessing and mitigating security risks associated with AI, machine learning, and advanced analytics.
• Solid knowledge of recognised security frameworks and standards (e.g. NCSC CAF, ISO/IEC 27001, CIS Benchmarks).
• Ability to balance technical depth with delivery pragmatism, providing advice that enables progress while remaining defensible.
• Experience working in agile, product‑centred, or project‑based delivery environments.

About us

At Allwyn, we are dedicated to changing lives and growing the National Lottery responsibly, championing its positive impact on people, places, and the planet. Innovation - We pride ou