GRC Analyst

📋 Description

• Own end-to-end project management of the compliance programme: support ISO 27001 / SOC 2 audits
• Manage data protection operations and training, with UK GDPR at the core
• Build and continuously improve processes – automate manual, ad‑hoc processes
• Coordinate business continuity: BCP/DR obligations and ownership of the Major Incident process
• Support AI governance work – internal AI and engineering AI policies, covering data handling, human
• Coordinate health & safety compliance as we expand into physical premises and data centre

🎯 Requirements

• Solid UK GDPR and data protection experience
• Genuine curiosity about how controls actually work
• Hyper-organised – can run multiple concurrent workstreams without anything slipping
• Builder's mindset – comfortable creating and automating a process from nothing
• Autonomous and idea-driven
• Mid-level compliance/GRC/information security experience

🎁 Benefits

• Company-wide share scheme
• Bonus
• Travel paid
• Real ownership of a function, built from the ground up
• Senior support rather than senior oversight
• Work at the forefront of the AI infrastructure industry