GRC Analyst

About This Opportunity

We are representing a confidential AI infrastructure organization that is scaling rapidly and building out its governance, risk, and compliance capability from the ground up. This is a genuine builder's role for someone who enjoys creating structure and processes rather than inheriting mature systems.

Our client operates at the intersection of cutting-edge AI infrastructure and institutional-grade governance. As they expand their operations and footprint, they need a GRC Analyst to own and project-manage the compliance programme end-to-end, working alongside senior security and finance leadership.

This role is based in London and offers real ownership of a function you'll be building from scratch, with senior support and access to enterprise-level frameworks without the bureaucracy of a large organization.

Responsibilities

• Own end-to-end project management of the compliance programme, including ISO 27001 and SOC 2 audit support, policy lifecycle management, and customer security questionnaires
• Manage data protection operations and training with UK GDPR compliance at the core
• Build and automate processes for evidence collection, policy tracking, and questionnaire responses to replace manual, ad hoc workflows
• Coordinate business continuity planning, disaster recovery obligations, and ownership of the Major Incident process including testing and evidencing
• Support AI governance work and keep pace with evolving regulatory requirements including the EU AI Act, covering data handling, human oversight, and vendor assessment
• Coordinate health and safety compliance as operations expand into physical premises, helping build a proper H&S management system
• Partner with Finance and Engineering leadership on KYC, Anti-Bribery and Corruption evidence, and technical control documentation
• Contribute to the wider governance roadmap as the organization grows, including due diligence processes and ESG governance

What We're Looking For

Essential:

• Solid UK GDPR and data protection experience
• Mid-level compliance, GRC, or information security experience
• Genuine curiosity about how controls actually work—you want to understand the journey behind the compliance, not just tick boxes
• Hyper-organized with the ability to run multiple concurrent workstreams (audits, questionnaires, training, policy updates) without dropping anything
• A builder's mindset—comfortable creating and automating processes from nothing rather than following existing playbooks
• Autonomous and idea-driven approach—you'll be directed on priorities but not micromanaged on execution
• Confident stakeholder management skills—you'll work directly with Finance and Engineering leadership

Desirable:

• Exposure to ISO 27001 or SOC 2 audit cycles
• Experience with business continuity or major incident processes
• Familiarity with AI governance or emerging AI regulation
• Interest in health and safety, ESG reporting, or physical security and facilities governance
• Experience with GRC tooling such as Vanta or equivalent platforms

How We Work With You

Candidates apply directly through Get A Job.ai. Our talent team will screen your application and conduct an initial interview to understand your experience and career goals. If there's a strong match, we'll submit your profile to our client for consideration. Please do not attempt to contact the client directly—all communication should flow through Get A Job.ai to ensure a professional and coordinated process.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Opportunity: Get A Job.ai is committed to inclusive recruiting practices. We welcome applications from candidates of all backgrounds and work to ensure fair consideration throughout the hiring process.