AI Governance Manager

Sanderson; Greater London; On-site; GBP 80,000 - 120,000; Full time

Job summary

Sanderson is seeking a Lead Technical GRC Analyst – Responsible AI in Central London, onsite 2–3 days per week. This six‑to‑twelve month contract sits in a growing AI governance programme within the Technology, Security & Governance team.

You will establish and run governance, risk management and assurance around Responsible AI, integrating AI risk into the broader technology risk framework and providing clear MI for governance forums and senior stakeholders.

Qualifications

• Background in technology GRC, IT risk, information security governance or technology audit.
• Knowledge of, or strong interest in, AI governance and Responsible AI principles.
• Experience with risk registers, control frameworks, audit support and evidence gathering.
• Able to produce clear risk reporting and MI for senior audiences and committees.
• Comfortable working with technology, security, legal, risk and business teams.
• Experience of third-party risk management would be useful.
• Financial services or regulated industry experience is an advantage.

Responsibilities

• Help design, implement and run the Responsible AI governance framework, covering risks such as fairness, transparency, explainability, privacy, security and human oversight.
• Carry out risk triage and assessments on AI use cases, emerging technologies and third-party services, recommending proportionate mitigations.
• Define, operate and test technology and AI controls, making sure they are evidence-based, auditable and linked into existing GRC processes.
• Maintain and improve policies, standards, procedures and risk frameworks, embedding Responsible AI requirements into them.
• Produce MI, metrics and reporting on technology and AI risk posture, control effectiveness, incidents and remediation for governance forums and senior stakeholders.
• Support third-party and supplier risk activity, including identifying AI-related risks introduced by vendors.
• Support internal and external audits and regulatory reviews, track remediation to closure and triage events from tools such as Microsoft Purview.
• Identify, assess and record technology risks across IT, data, security and third parties within agreed risk appetite.
• Build AI risk awareness across the organisation through guidance, training and awareness sessions

Skills

Technology GRC

IT risk

Info security governance

Technology audit

AI governance

Tools

Microsoft Purview

Job description

Lead Technical GRC Analyst – Responsible AI

Location: Central London - 2/3 Days p/w Onsite

Duration: 6-12 Months Initial + Extensions

Industry: Pension Fund / Investment Management - Greenfield Programme

A large UK pensions and investment organisation managing multi-billion-pound assets on behalf of hundreds of thousands of members. The technology function is expanding its use of AI and is creating a dedicated Responsible AI role within its Technology, Security & Governance team.

The Role

This is a new position acting as the organisation's Responsible AI lead. You will set up and run the governance, risk management and assurance arrangements that support safe adoption of AI across the business. AI risk will be managed as part of the wider technology risk and security framework rather than in isolation, so the role also covers broader technology GRC.

Key Responsibilities

• Help design, implement and run the Responsible AI governance framework, covering risks such as fairness, transparency, explainability, privacy, security and human oversight
• Carry out risk triage and assessments on AI use cases, emerging technologies and third-party services, recommending proportionate mitigations
• Define, operate and test technology and AI controls, making sure they are evidence-based, auditable and linked into existing GRC processes
• Maintain and improve policies, standards, procedures and risk frameworks, embedding Responsible AI requirements into them
• Produce MI, metrics and reporting on technology and AI risk posture, control effectiveness, incidents and remediation for governance forums and senior stakeholders
• Support third-party and supplier risk activity, including identifying AI-related risks introduced by vendors
• Support internal and external audits and regulatory reviews, track remediation to closure and triage events from tools such as Microsoft Purview
• Identify, assess and record technology risks across IT, data, security and third parties within agreed risk appetite
• Build AI risk awareness across the organisation through guidance, training and awareness sessions

About You

• Background in technology GRC, IT risk, information security governance or technology audit
• Knowledge of, or strong interest in, AI governance and Responsible AI principles
• Experience with risk registers, control frameworks, audit support and evidence gathering
• Able to produce clear risk reporting and MI for senior audiences and committees
• Comfortable working with technology, security, legal, risk and business teams
• Experience of third-party risk management would be useful
• Financial services or regulated industry experience is an advantage

Why Apply

• A newly created role with the chance to shape how AI is governed from an early stage
• Visible position working with senior stakeholders and governance forums
• Scope to develop specialist expertise in AI governance, a growing area within financial services