GitHub Copilot Governance Engineer | Contract | Fully Remote (UK) | £550/day (Inside IR35)

Our client is a scale up technology consultancy, and they’re looking for a technical specialist to help a UK public sector client adopt GitHub Copilot, the Copilot CLI and MCP servers securely. You’ll sit between engineering, cyber security and governance, working out what’s safe to switch on, proving it with evidence, and writing it down so others can run with it.

This is a hands-on role. You’ll configure, test and document the tooling yourself, and work closely with the client’s cyber team to get decisions made.

The opportunity

You’ll join the consultancy’s delivery team on an end client project, owning the secure rollout of AI-assisted development tooling. It’s as much about structured testing and clear writing as it is about the technology, and you’ll represent the consultancy well on a regulated, public sector engagement.

What you’ll be doing

• Updating the GitHub Copilot threat model to cover Copilot CLI, GitHub CLI and additional MCP servers, working with the client’s cyber team and capturing further risks in line with the AI Risk Management Toolkit
• Configuring and testing enterprise security controls (for example, global disablement of auto-approvals), enabling Copilot CLI, and submitting both CLIs with documentation to the self-service software catalogue
• Testing and enabling Jira, Confluence and GitHub MCP servers with minimum read access, testing higher-risk MCP capabilities with nominated power users, and proposing an approval process for new MCP servers to the client’s cyber team
• Reviewing the client’s AI Knowledge Hub and Confluence guidance and writing an SOP for enabling frontier Copilot models
• Maintaining a Governance Decision Log, documenting configurations and processes, and producing knowledge transfer materials
• Monitoring the GitHub Changelog and documenting how the client stays aligned to the latest Copilot policies, covering rationale, test evidence and limitations, and aligning artefacts to the AI Centre of Excellence guidance
• Attending the weekly troubleshooting and showcase session and the daily standup

What you’ll bring

• Hands-on GitHub Enterprise administration and policy configuration, with working knowledge of GitHub Copilot, its CLI and agent features
• An understanding of MCP and its security implications, including tool permissions and auto-approval
• Experience in threat modelling and security risk assessment, ideally for AI or developer tooling, and of working with a cyber team in a regulated or public sector setting
• A track record of structured testing with clear evidence, and strong technical writing for SOPs, guidance and handover materials
• Comfort working fully remote and largely autonomously

Desirable

• Familiarity with UK government AI governance
• Experience with software packaging and self-service catalogues
• Jira and Confluence