GRC Lead – InsurTech Risk, Compliance & Audits

Artificial Labs; Greater London; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Private medical insurance

Income protection insurance

Life insurance (4x base salary)

On-site gym

Job summary

Artificial Labs in London is seeking a Governance, Risk & Compliance lead to own risk management, compliance programmes and client security assurance. You will drive certification efforts, manage audit readiness, and coordinate across security, legal, and engineering to reduce risk while enabling trusted customer engagements.

The role requires experience in regulated environments, familiarity with SOC 2 and ISO certifications, and the ability to communicate risk clearly to senior stakeholders.

Qualifications

• Experience running governance, risk and compliance in tech or regulated environments.
• Knowledge of risk registers, appetite and exception handling in practice.
• Familiarity with assurance frameworks such as SOC 2 and ISO standards.

Responsibilities

• Run the risk register day to day with appetite and prioritisation.
• Maintain a register of compliance obligations to clients, regulators and contracts.
• Lead certification and assurance work and prepare for audits and assessments.
• Coordinate internal and external audits and report risk status to leadership.
• Own client security assurance processes, including questionnaires and assurance packs.
• Manage third‑party and vendor risk and due diligence.

Skills

Governance

Risk management

Compliance

Security questionnaires

Tools

SOC 2

ISO 27001

GDPR

Job description

Artificial Labs in London is seeking a Governance, Risk & Compliance lead to own risk management, compliance programmes and client security assurance. You will drive certification efforts, manage audit readiness, and coordinate across security, legal, and engineering to reduce risk while enabling trusted customer engagements.

The role requires experience in regulated environments, familiarity with SOC 2 and ISO certifications, and the ability to communicate risk clearly to senior stakeholders.