Information Security and AI GRC Manager

Reference: x0cfx352u3hyahh3x6hy

We are seeking an experienced Information Security and AI GRC Manager to lead the development and continuous improvement of governance, risk and compliance frameworks across information security and artificial intelligence. This is an influential role for a collaborative professional who can translate regulatory expectations, emerging risks and business objectives into practical controls and clear guidance.

You will develop and maintain policies, standards and procedures covering information security, data protection, artificial intelligence governance, third-party risk and operational resilience. Working with technology, legal, privacy, risk and business teams, you will ensure that security and AI-related risks are identified, assessed, recorded and managed effectively.

Key responsibilities will include overseeing risk assessments, control testing, audit preparation and remediation activity; maintaining risk registers and management reporting; and supporting compliance with relevant legislation, standards and regulatory requirements. You will also establish governance processes for the responsible adoption and use of AI, including model and use-case assessments, supplier due diligence, documentation, monitoring and review.

The role will involve advising senior stakeholders, facilitating governance forums and promoting a strong culture of security, privacy and responsible innovation. You will monitor changes in the threat, regulatory and AI landscape, assess their potential impact and recommend proportionate improvements. You may also support incident response, business continuity exercises and the development of training and awareness programmes.

Applicants should have substantial experience in information security governance, risk and compliance, with demonstrable knowledge of recognised frameworks such as ISO 27001, NIST or equivalent. Experience of AI governance, technology risk, data protection or responsible AI principles is highly desirable. Professional qualifications such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or Auditor, or relevant AI governance certification would be advantageous.

You will be an effective communicator with strong analytical, organisational and stakeholder-management skills. The successful candidate will be comfortable working with ambiguity, challenging constructively and presenting complex risks in a clear, concise manner. Experience operating in a regulated or fast-changing environment, alongside a pragmatic and solutions-focused approach, will be important.

COMPETITIVE SALARY
Added 26/10/2026
Reference: x0cfx352u3hyahh3x6hy

Information Security and AI GRC Manager

Leeds, England, United Kingdom Permanent Governance and Compliance

Other similar jobs

Enterprise Information Security Architect

Added 26/10/2026

We are seeking an experienced Enterprise Information Security Architect to define and deliver secure, resilient and practical security architectures across a complex technology environment. This is an influential role for a strategic thinker who can translate business objectives and evolving threats into clear security principles, standards and designs. You will develop and maintain the enterprise security architecture, ensuring that security is embedded across applications, infrastructure, cloud services, data platforms and emerging technologies. Working closely with technology, risk, compliance and delivery teams, you will provide expert guidance throughout the solution lifecycle, from early concepts and design reviews through to implementation and...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

Information Security Analyst – GRC & Risk

Added 20/10/2026

We are seeking an Information Security Analyst – GRC & Risk to support the development, implementation and continuous improvement of effective information security governance, risk and compliance practices. This role will help protect information assets, strengthen organisational resilience and ensure that security activities align with applicable regulations, industry standards and business objectives. You will work closely with technology, legal, compliance, audit and operational teams, providing clear, practical advice on information security risks and controls. Key responsibilities will include maintaining security policies, standards, procedures and risk registers; conducting information security and third-party risk assessments; supporting the identification, evaluation and treatment of...

Learn more

Information Security (GRC) Specialist

Added 20/10/2026

We are seeking an Information Security (GRC) Specialist to support the development, maintenance and continuous improvement of governance, risk and compliance practices across the organisation. This is an opportunity to contribute to a mature information security environment, helping to ensure that business activities, technology services and third-party relationships are managed in line with relevant policies, regulatory obligations and industry standards. Key responsibilities will include maintaining information security policies, standards and procedures; coordinating risk assessments and supporting the creation and tracking of remediation plans; monitoring compliance with applicable legislation, contractual requirements and recognised frameworks; and preparing clear reports for senior stakeholders....

Learn more

Information Security GRC Analyst

Added 14/10/2026

We are seeking an Information Security GRC Analyst to support the development, maintenance, and continuous improvement of information security governance, risk, and compliance activities. The role will help ensure that security policies, controls, and processes remain aligned with regulatory obligations, industry standards, and business objectives. You will work with stakeholders across technology, operations, privacy, legal, and risk functions to promote a consistent and practical approach to managing information security risk. Key responsibilities include maintaining security policies, standards, procedures, and control documentation; coordinating risk assessments, control testing, and remediation tracking; supporting internal and external audits; and preparing clear reports, dashboards, and...

Learn more

Information Security Analyst (GRC)

Added 09/10/2026

We are seeking an Information Security Analyst (GRC) to support the development, maintenance and continuous improvement of information security governance, risk and compliance activities. This role will help ensure that security practices align with applicable laws, regulations, industry standards and organisational policies. You will work with stakeholders across technology, operations and business functions to identify risks, assess controls and promote a consistent approach to information security. Key responsibilities include maintaining security policies, standards, procedures and control frameworks; coordinating risk assessments and supporting the documentation of risk treatment plans; monitoring compliance with internal requirements and external obligations; and assisting with internal...

Learn more

Information Security (GRC) Analyst

Added 07/10/2026

We are seeking an Information Security (GRC) Analyst to support the development, operation and continuous improvement of information security governance, risk and compliance activities. Working with teams across the business, you will help ensure that security controls, policies and processes are appropriately designed, implemented, documented and monitored. This is an opportunity to contribute to a maturing security function and help strengthen the organisation’s ability to manage information and technology risks effectively. Your responsibilities will include maintaining information security policies, standards, procedures and control frameworks; supporting risk assessments, control testing and remediation tracking; and preparing clear reports on security risks, control...

Learn more

Information Security GRC Analyst

Added 24/09/2026

We are seeking an Information Security GRC Analyst to support the development, implementation and continuous improvement of governance, risk and compliance practices. This role will help ensure that information security policies, controls and processes remain effective, proportionate and aligned with business objectives, regulatory expectations and recognised industry frameworks. You will work with stakeholders across technology, operations, legal, privacy and internal audit to promote a consistent and practical approach to managing information security risk. Key responsibilities will include maintaining security policies, standards, procedures and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and external audits; and preparing clear...

Learn more

Information Security GRC Lead

Added 21/09/2026

We are seeking an experienced Information Security GRC Lead to strengthen governance, risk management and compliance capabilities across a complex technology and business environment. This role will provide strategic direction while remaining closely involved in the delivery of practical security initiatives, ensuring that information security risks are identified, assessed and managed in line with business priorities and regulatory expectations. Key responsibilities will include developing and maintaining information security policies, standards and control frameworks; coordinating enterprise-wide risk assessments; managing risk treatment plans and tracking remediation activities; and preparing clear reporting for senior leadership and relevant governance forums. You will lead internal...

Learn more

Information Security & GRC Specialist

Added 17/09/2026

We are seeking an Information Security & GRC Specialist to support the development, implementation and continuous improvement of information security governance, risk and compliance activities. The role will help protect business information and technology assets by translating security requirements into practical policies, processes and controls. You will work with stakeholders across technology, operations, legal, privacy and business functions to promote a strong security culture and ensure that risks are identified, assessed and managed effectively. Key responsibilities include maintaining information security policies, standards and procedures; coordinating risk assessments, control reviews and remediation plans; supporting internal and external audits; and monitoring compliance...

Learn more

Information Security GRC Lead

Added 08/09/2026

We are seeking an experienced Information Security GRC Lead to strengthen and mature governance, risk and compliance activities across the organisation. In this role, you will lead the development, implementation and continuous improvement of information security policies, standards, procedures and control frameworks. You will work closely with technology, legal, privacy, risk, audit and business stakeholders to ensure that security requirements are clearly defined, consistently applied and aligned with business objectives and regulatory obligations. Your responsibilities will include maintaining the information security risk management programme, coordinating risk assessments, documenting remediation plans and monitoring progress against agreed actions. You will lead internal...

Learn more

Principal IT Security Manager (GRC)

Added 15/09/2026

We are seeking a Principal IT Security Manager (GRC) to lead the development, implementation and continuous improvement of an enterprise-wide governance, risk and compliance framework. This senior role will provide strategic direction on information security risk management, regulatory compliance, policies, standards and control effectiveness across technology and business environments. You will act as a trusted adviser to senior stakeholders, translating complex security and regulatory requirements into practical, risk-based solutions that support business objectives. Key responsibilities include owning the information security risk management lifecycle, including risk identification, assessment, treatment, acceptance and reporting. You will oversee the design, review and maintenance of...

Learn more

Governance, Risk & Compliance (GRC) Infosec Manager (PCI)

Added 13/10/2026

We are seeking an experienced Governance, Risk & Compliance (GRC) Infosec Manager with strong expertise in Payment Card Industry Data Security Standard (PCI DSS) compliance. This role will lead the development, implementation and continuous improvement of information security governance, risk management and compliance activities across a complex technology and business environment. You will act as a trusted adviser to senior stakeholders, helping to embed effective security practices while ensuring regulatory, contractual and industry requirements are consistently met. Key responsibilities will include owning the PCI DSS compliance programme, coordinating assessments and audits, maintaining policies, standards and control frameworks, and monitoring remediation...

Learn more

Senior Manager, Cybersecurity Governance, Risk & Compliance (GRC)

Added 18/09/2026

We are seeking a Senior Manager, Cybersecurity Governance, Risk & Compliance (GRC) to lead the development and continuous improvement of a mature cybersecurity governance and risk management framework. This role will provide strategic direction, independent challenge and practical guidance to ensure security controls, policies and processes align with business objectives, regulatory obligations and recognised industry standards. The successful candidate will work closely with technology, risk, legal, audit and operational teams to strengthen cyber resilience across the organisation. Key responsibilities include owning and maintaining cybersecurity policies, standards, procedures and control frameworks; overseeing enterprise cyber risk assessments, risk registers, remediation plans and...

Learn more

GRC Security Consultant - Operational Security

Added 23/10/2026

We are seeking a GRC Security Consultant – Operational Security to support the development, implementation and continual improvement of security governance, risk and compliance activities. This role will work closely with technical and business stakeholders to ensure that operational security practices are effective, proportionate and aligned with relevant policies, standards and regulatory obligations. You will assess security risks across operational processes, systems and services, documenting findings and working with control owners to agree practical remediation plans. Responsibilities will include supporting risk assessments, maintaining security registers, reviewing policies and procedures, monitoring control performance and preparing clear reports for management and governance...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.