Назад
Company hidden
7 дней назад

GRC & Data Protection Manager (AI)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
GRC & Data Protection Manager (AI): Shaping and embedding data protection, AI governance, and risk management frameworks across a tech-enabled business with an accent on GDPR/UK GDPR, the EU AI Act, ISO 31000, and supplier risk. Focus on conducting DPIAs and AI assessments, developing controls and policies, and integrating governance into business operations.

Location: London, Kings Cross, United Kingdom; hybrid with three days per week in the office

Company

hirify.global is a rapidly growing business services provider specialising in tech-enabled back-office solutions across Business, Procurement and Financial Solutions.

What you will do

  • Enhance and integrate governance frameworks for data protection, AI governance, risk management, legislation and industry standards.
  • Develop and advise on data protection, AI governance and risk management policies, procedures, guidance and checklists.
  • Lead risk identification, assessment, mitigation and reporting controls, including risk triage, risk registers, trends and key risk indicators.
  • Conduct risk assessments, AI assessments and Data Protection Impact Assessments for new projects, products and services.
  • Oversee third-party management and supplier risk assessments, and advise stakeholders, vendors, suppliers and B2B customers.
  • Organise cross-functional governance and compliance forums and monitor developments in data protection, AI governance and quality management.

Requirements

  • A relevant bachelor’s degree.
  • Strong knowledge and hands-on experience with GDPR/UK GDPR, the EU AI Act, the ePrivacy Directive and other major frameworks such as CCPA, HIPAA and the EU Data Act.
  • Practical experience with risk management and assessment frameworks including ISO 31000 and ISO 27001.
  • Significant relevant professional experience in a comparable role.
  • Proven ability to conduct robust risk and compliance assessments.
  • Experience developing or implementing data protection or risk management frameworks within an organisation.

Nice to have

  • Professional data protection certifications such as IAPP CIPP/E, CIPM, CIPT or AIGP, and certifications aligned to ISO standards.
  • Exposure to ISO 9001, ISO 14001, ISO 45001 or ISO 22301.
  • Familiarity with privacy laws across the US, Latin America and Asia, and privacy management tools such as OneTrust.
  • Cross-functional collaboration, strong analytical, research and organisational skills.
  • Ability to understand the technology behind products and services and related policy considerations.
  • Experience prioritising work and meeting challenging deadlines in a fast-paced environment, with understanding of the commercial, legal and regulatory context.

Culture & Benefits

  • Permanent full-time hybrid role with three office days per week in London.
  • 25 days of annual leave, with the option to purchase five additional days.
  • Birthday day off and three additional annual leave days after five years of service.
  • Wellbeing and mental health benefits, personal medical, critical illness and dental insurance.
  • Matched pension contributions up to 10%, car benefit scheme and online learning platform.
  • Innovative, fast-paced and inclusive environment with equal opportunity employment.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →