Senior GRC Lead - Privacy, AI & Security

Intent HQ; Gould's Green; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Flexible working

Private medical insurance

Free breakfast daily (when in the offi

26 days holiday (increasing with s

Pension scheme

Income Protection with Employee Assist

Life Assurance

Higher than statutory maternity/pat

Work socials

Wellbeing programme

Cycle to work scheme

Training opportunities

Job summary

Intent HQ is seeking a Senior GRC Lead – Privacy, AI & Security to run day-to-day governance, risk and compliance for information security, privacy and AI. You will operate, monitor and improve the management systems in practice under the VP of InfoSec & Privacy Operations.

The role emphasizes privacy controls, data handling for analytics, and collaboration with Product, Engineering, Data, Legal and Customer Success teams to ensure compliance and continuous improvement.

Qualifications

• 3–5 years of hands-on operational GRC experience across information security, privacy and AI or emerging tech risk.
• Working knowledge of UK GDPR, the DPA 2018 (and DUAA 2025) and EU GDPR in analytics and AI
• Hands-on experience running PIAs/DPIAs for analytics or data-driven products and handling individual rights requests
• Experience operating controls, collecting evidence and supporting audits against ISO 27001 and/or ISO 27701
• Experience maintaining risk registers, control frameworks and remediation trackers
• Experience working with engineering and data teams to document data flows and track remediation
• Experience in a technology, SaaS, AI, data analytics or cloud-based business

Responsibilities

• Operate day-to-day processes of ISO 27701, ISO 27001 and ISO 42001 management systems per VP guidance.
• Maintain risk register, SoA, control register and integrated mappings across standards.
• Identify and assess information security, privacy and AI risks across products and client implementations; escalate as needed.
• Maintain GRC calendar with reviews, control tests, policy dates and audit milestones.
• Prepare inputs for management review, including metrics, actions and control status

Skills

GRC operations

Information security

Privacy compliance

UK GDPR

PIA/DPIA

Audit support

Risk management

Job description

Intent HQ is seeking a Senior GRC Lead – Privacy, AI & Security to run day-to-day governance, risk and compliance for information security, privacy and AI. You will operate, monitor and improve the management systems in practice under the VP of InfoSec & Privacy Operations.

The role emphasizes privacy controls, data handling for analytics, and collaboration with Product, Engineering, Data, Legal and Customer Success teams to ensure compliance and continuous improvement.