AI Security Policy & Governance Lead

Vbeyond; Greater London; On-site; GBP 110,000 - 150,000; Full time

Job summary

Vbeyond is seeking an experienced Security Governance & Policy Lead - AI to own the security policy, governance and compliance framework for the organisation's AI development environment. You will lead AI security policy development, third-party risk management and regulatory compliance across GDPR and the EU AI Act, providing senior leadership with visibility of risk posture.

The role requires 6+ years in Information Security GRC, strong policy lifecycle expertise and the ability to translate

Qualifications

• 6+ years' experience in Information Security Governance, Risk & Compliance (GRC).
• Strong enterprise security policy development and lifecycle management experience.
• Strong knowledge of GDPR.
• Practical understanding of AI governance and security risks.
• Awareness of EU AI Act obligations.
• Experience conducting regulatory or compliance assessments.
• Strong third-party risk management experience.
• Experience developing and implementing security governance frameworks.
• Strong stakeholder management and communication skills.
• Experience working in regulated industries such as financial services, healthcare or defence.

Responsibilities

• Own and maintain the security governance framework for the AI development environment.
• Develop, maintain and enforce AI-specific security policies and standards.
• Draft and manage AI policies such as AI Acceptable Use Policy, AI Data Classification Policy, Agentic Action Policy.
• Ensure policies clearly define user responsibilities and security requirements.
• Establish governance controls for AI-assisted and agentic workflows.
• Coordinate policy reviews and incorporate lessons from incidents and audits.
• Lead regulatory and compliance assessments relating to AI usage.
• Assess requirements under GDPR, EU AI Act and sector-specific regulations.
• Translate regulatory requirements into practical security controls and policies.
• Maintain evidence and documentation required for compliance assessments and audits.
• Monitor regulatory developments affecting AI security and governance.
• Lead third-party security and risk assessments for AI technology providers.
• Manage ongoing security monitoring of critical AI vendors.
• Assess vendor security controls, risks and compliance posture.
• Track remediation activities and elevate significant third-party risks.
• Maintain appropriate third-party risk documentation and governance records.
• Develop and deliver mandatory security awareness training for AI users.
• Ensure users understand acceptable use, data handling and security responsibilities.
• Promote secure and responsible use of AI technologies.
• Monitor compliance with relevant policies and identify areas requiring further awareness or training.
• Assess and monitor AI security risks across the organisation.
• Prepare security risk reporting for the CISO and AI Governance Committee.
• Communicate security risks, control gaps and remediation recommendations to senior stakeholders.
• Coordinate with Security, Legal, Compliance, Privacy, Technology and business teams.
• Support security investigations, audits and governance reviews.

Skills

GRC experience

Policy development

GDPR knowledge

AI governance

EU AI Act

Regulatory assessments

Third-party risk

Stakeholder management

Regulated industry

Job description

Vbeyond is seeking an experienced Security Governance & Policy Lead - AI to own the security policy, governance and compliance framework for the organisation's AI development environment. You will lead AI security policy development, third-party risk management and regulatory compliance across GDPR and the EU AI Act, providing senior leadership with visibility of risk posture.

The role requires 6+ years in Information Security GRC, strong policy lifecycle expertise and the ability to translate