GRC & AI Security Analyst

PoloWorks; Cheltenham; On-site; GBP 45,000 - 55,000; Full time

Job summary

PoloWorks is seeking a Security GRC & AI Analyst to strengthen information security across the Marco Group, with responsibility for governance, risk management and AI governance. The role focuses on ISO 27001, DORA, OpRes and security controls, in a cross-functional environment spanning Risk, Compliance, Technology and third-party suppliers.

You will help deliver AI governance, risk assessments and responsible AI adoption, while maintaining strong policies and incident response readiness within

Qualifications

• Experience in information security in a governance, risk, or compliance role.
• Practical knowledge of Microsoft Defender and Microsoft Purview.
• Experience with security risk assessments and governance frameworks.
• Understanding of ISO 27001 and security audit requirements.
• Familiarity with AI governance and responsible AI adoption.
• Knowledge of data protection and privacy requirements.
• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management abilities.
• Interest in emerging technologies and AI.

Responsibilities

• Governance, Risk and Compliance activities including policy maintenance and audits.
• ISO 27001 certification activities and control reviews.
• Support DORA compliance and ICT risk management.
• Monitor and improve Lloyd's Operational Resilience requirements.
• Administer Microsoft Defender and Purview security controls.
• Oversee AI governance, risk management and responsible AI adoption.
• Collaborate with Risk, Compliance, Technology and suppliers.
• Produce KRI/KPI reporting for governance forums.
• Support third-party supplier security assessments.
• Security awareness and training content creation.

Skills

GRC

ISO 27001

Microsoft Defender

Microsoft Purview

AI governance

Risk assessment

Data protection

Stakeholder management

Incident response

Security controls

Job description

PoloWorks is seeking a Security GRC & AI Analyst to strengthen information security across the Marco Group, with responsibility for governance, risk management and AI governance. The role focuses on ISO 27001, DORA, OpRes and security controls, in a cross-functional environment spanning Risk, Compliance, Technology and third-party suppliers.

You will help deliver AI governance, risk assessments and responsible AI adoption, while maintaining strong policies and incident response readiness within