Senior Director, Technology GRC

Ifs1; Greater London; On-site; GBP 170,000 - 250,000; Full time

Job summary

IFS is seeking a Senior Director - Technology GRC to lead governance, risk and compliance for IFS Cloud, Product and Technology. You will define and oversee a consistent Technology GRC framework across product, engineering, cloud and technology teams.

You will partner with enterprise controls owners to align the program with company frameworks, provide subject-matter leadership, and embed security, data protection, compliance and responsible AI governance into design, development, release and

Job description

Role overview

As Senior Director - Technology GRC, you will lead the governance, risk and compliance capability for IFS Cloud, Product and Technology.

Your remit covers the security, data protection, compliance and responsible AI governance requirements applicable to our products, technology environment and cloud services.

You will define and oversee a consistent Technology GRC framework that enables Product, Engineering, Cloud and Technology teams to identify, assess, manage and evidence risk throughout the product and service lifecycle.

You will partner with enterprise-level control owners to align the Technology GRC program with wider company frameworks and obligations, providing subject-matter leadership and escalation for material technology risks.

Your mandate is to make security, data protection, compliance and AI governance integral to how products and cloud services are designed, developed, released and operated.

Success requires rigorous oversight, practical business enablement and strong influence across technical and non-technical stakeholders.

Duties and accountabilities

Technology GRC strategy and operating model

• Develop and execute the GRC strategy and roadmap for Cloud, Product and Technology, aligned with the wider Trust and Intelligence strategy.


• Establish the Technology GRC operating model, including decision rights, governance forums, risk ownership, escalation routes and accountability across Product, Engineering, Cloud and Technology.


• Translate enterprise risk, security, privacy and compliance requirements into practical technology standards, controls and governance processes.


• Define measurable reporting for technology risk, control effectiveness, remediation, compliance readiness and customer assurance.


• Advise senior Product and Technology leaders on the risk and compliance implications of product strategy, technology investment and cloud-service decisions.

Cybersecurity governance for Cloud, Product and Technology

• Establish and oversee cybersecurity governance requirements for product development, technology platforms and cloud services.


• Partner with Cybersecurity, Engineering and Cloud Operations to embed security requirements into architecture, secure development, release and operational processes.


• Oversee governance for technology security risks, control gaps, exceptions and remediation commitments.


• Ensure relevant security controls are clearly owned, consistently evidenced and regularly assessed.


• Provide GRC oversight for material cybersecurity risks affecting products, technology platforms and cloud services.

Data protection and compliance for Cloud, Product and Technology

• Embed privacy and data-protection requirements into product design, architecture, engineering and cloud operations.


• Partner with Data Protection and Legal specialists to interpret regulatory and contractual requirements for technical teams.


• Oversee governance for data classification, data handling, retention, access, cross-border processing and related technology controls.


• Support compliance obligations relevant to cloud and software services, including GDPR, CCPA, SOC 2, ISO 27001, FedRAMP and NIST-based requirements, where applicable.


• Monitor remediation of technology-related data-protection and compliance gaps through closure.

AI governance for products and technology

• Establish and mature governance standards for the use of AI within IFS products and technology.


• Translate responsible AI principles and applicable AI requirements into product development controls, documentation and approval processes.


• Establish proportionate risk-assessment and governance requirements for AI use cases, including higher-risk or customer-impacting applications.


• Partner with Product, Engineering, AI/ML, Cybersecurity, Data Protection and Legal teams to address security, privacy, transparency, auditability, model and data risks.


• Define governance gates and evidence requirements across the AI lifecycle, including design, development, testing, release, monitoring and material change.


• Oversee governance for agentic and autonomous capabilities, including controls addressing unintended behavior, data exposure, prompt-based attacks, traceability and human oversight.

Controls, assurance and compliance readiness

• Establish and maintain a coherent technology control framework a