Назад
Company hidden
1 день назад

GRC Lead (AI Governance)

Формат работы
hybrid
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
GRC Lead (AI Governance): Operationalizing information security, data privacy, and AI governance controls for AI-driven products and enterprise client implementations with an accent on GDPR, ISO 27001/27701/42001, and responsible AI. Focus on conducting risk assessments and DPIAs, embedding controls with Product, Engineering, and Data teams, and managing audits, remediation, and emerging AI regulatory requirements.

Location: London, United Kingdom; hybrid, based in the London office 2–3 days per week and remote for the rest of the week

Company

hirify.global is an AI and data analytics business that helps enterprise organisations understand customer behaviour, generate insights, and deliver personalised customer experiences.

What you will do

  • Own operational governance, risk, and compliance across information security, data privacy, and AI governance.
  • Assess privacy risks in customer data processing, enrichment, profiling, analytics, and AI-driven products; manage DPIAs and privacy by design.
  • Develop and implement responsible AI frameworks, controls, accountability, and oversight, including support for the EU AI Act where applicable.
  • Manage information security risks, technical and organisational controls, incident remediation, risk registers, and control effectiveness.
  • Implement and maintain ISO 27001, ISO 27701, and ISO 42001 controls; coordinate audits, evidence collection, findings, corrective actions, and remediation.
  • Collaborate with Product, Engineering, Data, Analytics, Legal, Sales, and Customer Success on regulatory requirements, client due diligence, questionnaires, and compliance reporting.

Requirements

  • Proven experience in GRC, information security, privacy, or data protection.
  • Experience in a technology, SaaS, AI, data analytics, or cloud-based business.
  • Strong practical knowledge of GDPR and international data protection regulations.
  • Experience implementing and operating information security and privacy controls, including knowledge of ISO 27001 and ISO 27701.
  • Understanding of AI governance, responsible AI, and emerging AI regulations, including ISO 42001 and the EU AI Act where applicable.
  • Experience conducting risk assessments, DPIAs, compliance reviews, and vendor risk management.
  • Experience working with Product, Engineering, Data, and other technical teams.
  • Ability to translate regulatory requirements into practical business and technical controls.
  • Experience preparing for and managing internal and external audits.

Culture & Benefits

  • Flexible hybrid working with a collaborative, innovative, flat organisational structure.
  • Private medical insurance, subject to eligibility, plus income protection, an employee assistance programme, and life assurance.
  • 26 days of holiday, increasing with service, and a pension scheme.
  • Higher-than-statutory maternity and paternity benefits and a wellbeing programme.
  • Training opportunities, work socials, free office breakfast, and a cycle-to-work scheme.
  • Commitment to diversity, equality, inclusion, family-friendly flexibility, and personal development.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →