GRC Lead

About This Opportunity

We are representing a confidential legal technology organization headquartered in Edinburgh. Our client serves enterprise legal departments and maintains rigorous standards around security, privacy, and AI governance. They are seeking a senior GRC leader to own and scale their security and compliance function as the organization grows.

This is a high-impact leadership role that combines strategic planning with hands-on execution. You will set multi-year direction, represent security posture to customers and executives, and build the infrastructure, processes, and team needed for the next stage of growth.

Responsibilities

• Security Strategy & Leadership: Own the multi-year IT security and compliance roadmap, setting priorities, budget, and tooling decisions in partnership with Engineering and company leadership
• IT & Infrastructure Security: Manage security architecture across corporate IT and infrastructure including identity & access management, endpoint protection, cloud/network security, and lead incident response
• Compliance & Certification: Own SOC 2 Type II, ISO 27001/27017/27018, and ISO 42001 end-to-end—policies, controls, audit evidence, and audits
• AI Governance: Run the AI governance program including AI Impact Assessments and model/vendor risk reviews, ensuring responsible and compliant AI use across the product
• Privacy Operations: Manage privacy operations end-to-end including GDPR compliance, DPIAs, RoPA maintenance, sub-processor management, and Data Subject Request fulfillment
• Third-Party & Vendor Risk: Assess vendors and AI tools for security, privacy, and AI risk before adoption and establish appropriate contractual safeguards
• Team & Function Building: Build the people, processes, and tooling the function needs as it scales, with a mandate to grow the team over time
• Executive Reporting: Own risk and compliance reporting to leadership and board, translating technical risk into business terms
• Customer & Deal Support: Act as senior security voice for enterprise deals, managing security questionnaires, DPAs, and trust documentation in partnership with Sales, Customer Success, and Legal
• Automation & Tooling: Build lean, automation-first systems for evidence collection and compliance monitoring to scale the program efficiently

What We're Looking For

Essential:

• 8-10+ years in security, IT, or compliance roles with a track record of owning a security or compliance function end-to-end at a fast-growing SaaS or tech company
• Proven experience building or scaling a security/compliance program from an early stage, ideally as the founding or sole owner of the function
• Deep, hands-on expertise across SOC 2, ISO 27000 series, and ideally ISO 42001
• Strong grounding in core IT security fundamentals including identity & access management, endpoint/device security, and cloud or network infrastructure security
• Practical working knowledge of GDPR and related privacy regulation
• Experience presenting security posture, risk, and roadmap to executives, boards, or investors
• Experience building and/or managing a team or clear vision for growing one as the function scales
• Comfortable owning budget and vendor decisions at a strategic level
• Strong cross-functional operator and executive communicator, able to bridge Security, IT, Legal/Privacy, Engineering, and GTM teams

Valued:

• Prior experience as Head of Security, Director of Security/IT, or similar senior leadership title
• Relevant certifications such as CISSP/ISC2, CISM, AIGP, CIPP/E, CIPT, CCSK, or FIP
• Experience in legal tech, AI, or another highly regulated SaaS environment
• Experience designing AI risk or impact-assessment processes from scratch
• Familiarity with tools such as Datagrail, MineOS, Whistic, SafeBase, or Vanta

Location & Work Arrangement: This is an in-office role based in Edinburgh. The organization works together in person to enable close collaboration across product, engineering, and legal teams.

How We Work With You

Our talent team at Get A Job.ai partners with select organizations to identify senior security and compliance leaders. When you apply through our platform:

• A recruiter from Get A Job.ai will review your background and conduct an initial screening
• We will prepare and submit your profile to our client for consideration
• Please do not attempt to contact the client directly; all communication will flow through Get A Job.ai to ensure a professional and coordinated process

Pay

Compensation details will be discussed during the screening process and are competitive for this senior leadership role, including base salary, benefits, and meaningful equity.

Equal Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome applications from candidates of all backgrounds and work with our clients to ensure fair and equitable recruitment processes.