Governance Risk and Compliance Manager

Artificial Labs; Harrow; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Private medical insurance

Income protection insurance

Life insurance of 4 × base salary

On-site gym and shower facilities

Enhanced maternity and paternity pay

Team social events and company parties

Salary exchange on pension and nursery

Job summary

Artificial Labs is seeking a senior GRC lead to own the risk register, set risk appetite, handle exceptions, and drive certifications and assurance for clients. You will partner with security, legal, engineering and leadership to balance dense detail with strategic impact.

You will shape data protection, privacy approaches and the responsible use of AI tools while coordinating cross-functional teams and driving improvements across audits, controls and vendor risk in a fast-growing tech

Qualifications

• Experience running GRC in technology or regulated business.
• Knowledge of risk management practices: registers, appetite, exceptions.
• Familiarity with assurance frameworks such as SOC 2 and ISO standards.
• Experience with third-party and vendor risk.
• Ability to explain risk to non-technical audiences.
• Curiosity about AI governance and safe adoption.

Responsibilities

• Run the risk register day-to-day, including appetite, exceptions and prioritisation.
• Maintain a register of compliance obligations to clients, regulators and contracts with clear owners.
• Lead certification and assurance work, scoping targets and readiness.
• Coordinate internal and external audits.
• Monitor risks and controls; report to leadership.
• Own client security assurance and the questionnaire process.
• Run third-party and vendor risk, tiering suppliers and due diligence levels.
• Shape data protection, privacy approaches and AI tool usage.
• Support security awareness and training across the company.

Skills

Governance

Risk management

Compliance

SOC 2

ISO 27001

Vendor risk

Audits

Data protection

Communication

AI governance

Ledgy

Maji

Tools

Ledgy

Maji

Job description

About Artificial

Help shape the future of specialty insurance

At Artificial, we’re building the next generation of technology for the specialty (re)insurance market. Our mission is to transform how brokers and carriers operate in complex markets by removing operational barriers and enabling smarter, faster decision-making.

We use modern technology to solve real challenges for some of the world’s leading brokers and insurers. By automating the repetitive and structuring the complex, we help our partners unlock new opportunities for innovation and growth.

You’ll be joining a collaborative team that values curiosity, ownership, and continuous learning. We work in an environment where ideas are heard, support is built-in, and outcomes matter. Everyone here has the chance to make a tangible impact on our products, our customers, and the industry.

We've just raised $45M (£33M) in Series B funding from lead investor CommerzVentures, new investor Move Capital, as well as all existing shareholders. This investment round gives us the room to grow with confidence, continue to innovate, and ensure that Artificial remains the first choice for brokers and carriers seeking a smarter way to trade digitally.

Join us, and take the chance to be a part of something that will change the landscape of insurance for generations.

About The Role

We're looking for someone to build and run our governance, risk and compliance work as we grow. This is a broad role covering how we understand and track security and business risk, how we meet our obligations to clients and regulators, and how we show that we take security seriously.

You’ll own the risk register and the way we set risk appetite, handle exceptions and prioritise what matters. You'll also lead our compliance and assurance work, from certifications through to the security questionnaires and commitments that come up with clients. It suits someone who enjoys bringing order to this kind of work and can move between the detail and the bigger picture.

You’ll work closely with colleagues across security, legal, engineering and the leadership team, and pull in deeper technical expertise from the security team when a piece of work needs it.

Responsibilities

• Run the risk register day to day, including risk appetite, exceptions and prioritisation, and keep it useful rather than a box-ticking exercise
• Build and maintain a register of our compliance obligations to clients, regulators and contracts, with clear owners and review points
• Lead our certification and assurance work, deciding targets, scoping them and getting us ready
• Coordinate internal and external audits
• Monitor risks and controls, and report clearly to the leadership team on where we stand
• Own client security assurance, including the questionnaire process and a reusable, client-ready assurance pack
• Run third-party and vendor risk, including tiering suppliers and deciding the level of due diligence each needs
• Help shape our approach to data protection and privacy, and to the responsible use of AI tools
• Support security awareness and training across the company

About You

• Experience running governance, risk and compliance in a technology or regulated business
• Good working knowledge of risk management in practice, including registers, appetite and exceptions
• Familiarity with common assurance frameworks such as SOC 2 and ISO standards, and what it takes to reach them
• Experience with third-party and vendor risk
• Comfortable dealing with client security questionnaires and assurance requests
• A clear, organised communicator who can keep several pieces of work moving and explain risk in plain terms
• Curious about AI tools, keen to use them to work efficiently, and comfortable helping others adopt them safely

We especially want to hear from you if you have

• A background in financial services, InsurTech or another regulated industry
• Experience taking a company through a security certification such as SOC 2 or ISO 27001
• Exposure to data protection and privacy obligations, including GDPR
• An interest in AI governance and how to manage the risks of new tools
• Worked in a scale-up and built this kind of function from a low base

Benefits

• Private medical insurance
• Income protection insurance
• Life insurance of 4 * base salary
• On-site gym and shower facilities
• Enhanced maternity and paternity pay
• Team social events and company parties
• Salary exchange on pension and nursery fees
• Access to Maji, the financial wellbeing platform
• Company stock options managed through Ledgy
• Milestone Birthday Bonus and a Life Events leave policy
• Generous holiday allowance of 28 days plus national holidays
• Home office and equipment allowance, and a company MacBook
• Learning allowance and leave to attend conferences or take exams
• YuLife employee benefits, including EAP and bereavement helplines
• For each new hire, we plant a tree through our partnership with Ecologi Action
• The best coffee machine in London, handmade in Italy and imported just for us!

We’re proud to be an equal opportunities employer and are committed to building a team that reflects the diverse communities around us. If there’s anything you need to make the hiring process more accessible, just let us know—we’re happy to make adjustments. You’re also welcome to share your preferred pronouns with us at any point.

Think you don’t meet every requirement? We value potential as much as experience, and we know that raw talent counts.

As part of our hiring process, we’ll carry out some background checks. These may include a criminal record check, reviewing your credit history, speaking with previous employers and confirming your academic qualifications.