AI Cloud Compliance & Privacy Analyst

Verda; London; On-site; NOK 764,000 - 1,146,000; Full time

Job summary

Verda is expanding its governance, risk and compliance footprint as it scales its cloud AI platform in London and beyond. The role focuses on strengthening security, privacy and regulatory foundations for the growing AI cloud business.

You will help with certifications, policies and processes, align with GDPR, NIS2 and AI Act, and work with cross-functional teams to support continuous improvement and regulatory readiness.

Qualifications

• Monitor and report on certifications and assurance programs.
• Update policies to best-practice standards and support ways of working.
• Assist with GDPR/NIS2/AI Act compliance and regulatory guidance.
• Coordinate with cross-functional teams for audits and vendor risk reviews.
• Maintain compliance logs, controls and documentation.
• Develop internal training materials to raise compliance awareness.
• Stay up to date with evolving regulations and best practices.

Responsibilities

• Assist in monitoring and reporting on certifications (ISO27001/27017/27018/27701 and SOC 2 Type II).
• Review and update internal policies to meet best-practice standards.
• Ensure regulatory compliance with GDPR, NIS2, AI Act and related regulations.
• Support audits, vendor risk management and cross-functional coordination.
• Maintain compliance logs, registers and controls.
• Create internal compliance documentation and training materials.

Skills

Compliance

Regulatory knowledge

Policy writing

Project management

English fluency

Education

Related field degree

Tools

ISO27001

SOC 2

Job description

Verda is expanding its governance, risk and compliance footprint as it scales its cloud AI platform in London and beyond. The role focuses on strengthening security, privacy and regulatory foundations for the growing AI cloud business.

You will help with certifications, policies and processes, align with GDPR, NIS2 and AI Act, and work with cross-functional teams to support continuous improvement and regulatory readiness.