AI Governance, Risk & Assurance Consultant

Granard Consulting; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Granard Consulting is hiring an experienced consultant to deliver AI governance, risk and assurance engagements across traditional ML, generative AI and agentic AI within the UK. You will lead client engagements from scoping to final reports, balancing advisory work with independent assurance as client needs demand.

You will run AI governance engagements, perform risk assessments, classify use cases and map regulatory requirements, while guiding governance frameworks and controls across the AI

Qualifications

• Up to 7 years in technology risk, internal audit or GRC in consultancy or regulated organisation.
• Experience delivering AI governance, AI risk or AI assurance work with practical AI exposure.
• Experience reviewing, validating or testing AI-driven models and assessing performance and risk outcomes.
• Strong understanding of AI platforms, architectures and governance frameworks across the AI lifecycle.
• Experience with data governance, data quality, lineage and privacy controls and related regulations.

Responsibilities

• Deliver AI governance engagements: maturity assessments, policies, operating models and risk integration.
• Run AI estate discovery, use-case classification and risk tiering with regulatory mapping.
• Assess AI risk at use-case level including data, privacy, model and operational risk.
• Design controls and guardrails, oversight workflows and clear go/no-go recommendations.
• Set up monitoring for live AI, including incident handling and RSAs.
• Plan and carry out independent AI audits across organisation AI portfolio or specific use cases.
• Test controls over models, data and technology, including validation and privacy.
• Track regulation and standards (UK GDPR, EU AI Act, NIST RMF) and translate to client requirements.
• Document findings, lead workshops, and present executive-ready reports to management.
• Manage delivery: plan work, review others, control quality, timelines and budgets, coach teams.

Skills

AI governance

AI risk

AI assurance

Model risk

Technology risk

Stakeholder communication

Coaching analysts

Education

Degree in a relevant subject

Right to work in UK

Tools

Python

SQL

Power BI

GRC tools

Job description

This role is based in the City and it's 4-days per week in the office

To be considered for this role,you must alreadybe eligible to work in the United Kingdom.

We offer AI governance, AI risk management and AI audit across traditional machine learning, generative AI and agentic AI, built around a Govern, Map, Measure, Manage approach at enterprise, portfolio, use-case and runtime level. We need an experienced consultant in the UK. You will work across all three areas, lead client engagements with limited supervision from scoping to final report and move between advisory work and independent assurance as client needs require.

As part of your duties, you will be responsible for:

• Deliver AI governance engagements: maturity assessments, AI risk appetite, taxonomy and policy, operating models (roles across the three lines, forums, decision rights, escalation), integration with enterprise risk, model risk, data, cyber and privacy, and ISO/IEC 42001 readiness.
• RunAI estate discovery (including shadow AI), use-case classification and risk tiering, regulatory mapping and a portfolio view, ending in a prioritised roadmap.
• Assess AI risk at use-case level,inherent and residual,covering customer and conduct harm, data and privacy, model and output, security and operational risk, across machine learning, generative AI and agentic AI.
• Design proportionate controls and guardrails, human oversight and approval workflows, and give a clear recommendation (go, conditional go, redesign or stop).
• Set up monitoring for live AI, with key risk indicators, incident handling and reassessment on material change, and support clients running it day to day.
• Plan and carry out independent AI audits, eithera governance auditacross the organisation and its AI portfolio or a deep audit of selected use cases, including support to internal audit teams.
• Test controlsover models, data and technology, including model performance and validation, data quality, lineage and privacy; coordinate specialist testing such as red teaming, where needed.
• Track AI regulation and standards (FCA and PRA expectations, EU AI Act, ISO 42001,NIST AI RMF, UK GDPR) and turn them into practical client requirements.
• Document findings, agree actionswith management, and lead workshops and steering committees, influencing senior leaders with executive-ready reports.
• Manage delivery: plan the work, review the work of others, controlquality, timelines and engagement finances, and coach analysts, including colleagues in India.

Qualifications and experience we consider to be essential for the role:

• Up to 7 years in technology risk, internal audit, model risk or GRC, in a consultancy (preferred) or in-house at a regulated or large organisation.
• Hands-on delivery of AI governance, AI risk or AI assurance work, or closelyrelated model risk or technology risk work with practical AI exposure.
• Experience reviewing, validating or testing traditional and AI-driven models,and assessing model performance and risk outcomes.
• Good understanding of AI platforms, architectures and governance frameworks, and the technology and operational risks across the AI lifecycle, including generative and agentic AI.
• Experience assessing data governance, data quality, lineageand privacy controls,with working knowledge of ISO/IEC 42001, NIST AI RMF, the EU AI Act, UK GDPR and UK regulatory expectations for AI.
• Experience scoping AI auditsand assessments, designing and testing controls, and writing audit-quality findings and reports.
• Confident communicator who can influencesenior stakeholders, explaincomplex topics clearly, lead an engagement independently and coach others.
• Degree in a relevant subject,and the right to work in the UK.

Skills and Personal attributes we would like to have:

• Professional certifications such as AIGP, CISA, CISM, CRISC, AAIA, AAIR, AAISM, or ISO 42001/ISO27001 Lead Auditor or Implementer.
• Exposure to third-party AI risk; experience in a regulatedsector; insurance stronglypreferred.
• Data literacy (for example Python, SQL or Power BI) and familiarity with leading GRC and AI governance tools.