Governance Manager

Senior GRC Lead – Privacy, AI & Security

12month FTC

Location: London, UK

Working arrangement: Hybrid – 2–3 days per week in the London office

Team: InfoSec & Privacy Operations

Reports to: VP of InfoSec & Privacy Operations

About Intent HQ

Intent HQ builds AI that understands human intent in every form.

Our technology helps organisations recognise customer needs, act on them at the right

moment and do so without compromising privacy. By combining Edge AI, behavioural

intelligence and agentic operating systems, we help businesses turn customer signals into

measurable commercial outcomes.

Trusted by global enterprises, Intent HQ manages 325M+ profiles and processes 250B

events daily.

Our achievements include:

AI Solution of the Year – AI World Series Awards 2026

AI Business of the Year – National AI Awards 2025

Analytics Company of the Year – British Data Awards 2025

Best AI Ethics & Diversity Strategy – AI World Series Awards 2025

These awards recognise our commitment to AI innovation, analytics excellence and ethical

leadership.

Discover more: www.intenthq.com

The Opportunity

We are looking for a Senior GRC Lead – Privacy, AI & Security to join our InfoSec &

Privacy Operations team.

This is a hands-on, operational role focused on delivering the day-to-day governance, risk

and compliance activities that underpin our information security, privacy and AI management

systems.Working under the direction of the VP of InfoSec & Privacy Operations, you will take

ownership of the processes, assessments, evidence collection, control monitoring and action

tracking that ensure our management systems operate effectively in practice.

You will support three key management system standards:

1. ISO/IEC 27701 – Privacy Information Management: Our primary operational focus.

2. ISO/IEC 27001 – Information Security Management: Supporting the effective

operation of our information security controls.

3. ISO/IEC 42001 – AI Management Systems: Supporting responsible AI governance

and oversight.

The role has a particular emphasis on practical privacy control operation, especially where

personal data is processed, analysed, inferred or enriched using AI and advanced analytics.

Our approach is grounded in privacy by design and privacy by default.

Intent HQ already has established frameworks, including a Privacy Impact Assessment (PIA)

Gateway and an AI governance policy suite overseen by our Emerging Tech, AI & Ethics

Committee.

Your role will be to bring these frameworks to life: ensuring they are implemented, tested,

monitored and evidenced across real business operations, products and client-facing

environments.

You will report to the VP of InfoSec & Privacy Operations and work closely with our

independent Data Protection Officer (DPO), who advises on and monitors privacy

compliance, as well as colleagues across Product, Engineering, Data, Legal, Security and

Customer Success.

What You'll Be Doing

1. Management System Operation

Operate the day-to-day processes of the ISO/IEC 27701, ISO/IEC 27001 and

ISO/IEC 42001 management systems, in line with priorities and direction from the VP.

Maintain risk registers, Statements of Applicability, control registers and integrated

control mappings across all three standards.

Identify, assess and document information security, privacy and AI risks across our

products, services and client implementations, escalating material issues

appropriately.

Maintain the GRC calendar, coordinating scheduled reviews, control testing, policy

review dates and audit milestones.

Prepare management review inputs, including performance metrics, outstanding

actions, risk updates and control status.

2. Privacy & Data Protection Operations

Support the practical operation of our privacy management framework, with ISO/IEC

27701 as the primary focus.

Coordinate and manage Privacy Impact Assessments (PIAs) and Data Protection

Impact Assessments (DPIAs), including assessments involving AI, analytics and

data-driven products.

Support the operation of the PIA Gateway, ensuring assessments are completed,

documented, reviewed and appropriately tracked.

Help monitor privacy controls relating to personal data processing, data enrichment,

profiling, inference and analytics.

Support the handling and tracking of individual data subject rights requests.

Work with technical and business teams to document data flows, identify privacy

risks and track remediation activities.

3. Risk, Controls & Assurance

Coordinate control owners to ensure controls are implemented, operating effectively

and supported by appropriate evidence.

Undertake and document control testing, identifying gaps and following up on

remediation.

Maintain remediation trackers, ensuring actions have clear owners, deadlines and

progress updates.

Support internal and external audits, including evidence preparation, audit

coordination and follow-up activities.

Support third-party and supplier risk assessments, ensuring relevant privacy, security

and AI risks are identified and recorded.

4. AI Governance & Responsible AI

Support the implementation and ongoing operation of Intent HQ's AI governance

framework.

Work with the Emerging Tech, AI & Ethics Committee to support governance

processes and maintain appropriate records.

Help identify and document risks associated with AI-enabled products, machine

learning, agentic systems and advanced analytics.

Support assessments against ISO/IEC 42001 and relevant responsible AI

frameworks, including the EU AI Act.

Ensure AI-related governance requirements are translated into practical controls,

evidence and monitoring activities.

What We're Looking For

We are looking for someone who combines strong operational GRC experience with a

practical understanding of privacy, information security and emerging AI technologies.

You will be organised, proactive and comfortable working across technical and non-technical

teams in a fast-moving technology business.

Essential Experience

3–5 years of hands-on operational Governance, Risk and Compliance (GRC)

experience, with exposure to information security, privacy and AI or emerging

technology risk.

Working knowledge of UK GDPR, the Data Protection Act 2018 (as amended by the

Data (Use and Access) Act 2025) and EU GDPR, particularly in the context of

analytics and AI.

Practical experience conducting PIAs and DPIAs for analytics or data-driven

products, alongside experience supporting individual rights requests.

Experience operating controls, collecting audit evidence and supporting audits

against ISO/IEC 27001 and/or ISO/IEC 27701.

Experience maintaining risk registers, control frameworks and remediation trackers.

Experience working with Engineering and Data teams to understand data flows,

document processing activities and track remediation.

Experience within a technology, SaaS, AI, data analytics or cloud-based business.

Desirable Experience

Experience supporting SOC 2 Type II audits.

Familiarity with ISO/IEC 42001.

Experience supporting a management system standard transition, such as ISO/IEC

27701:2025.

Experience in AI-enabled, analytics-heavy or marketing technology (MarTech)

environments.

Technical Understanding

You don't need to be an engineer, but you should be comfortable working with technical

teams and understanding how modern data and AI systems operate.

In particular, you will be able to:

Follow complex data flows, transformations and AI/ML or agentic analytics pipelines

sufficiently to assess relevant privacy and security controls.

Understand inference, aggregation and re-identification risks in multi-client

environments.

Ask informed questions of technical teams, applying regulatory and framework-based

reasoning.

Translate technical explanations into clear, practical governance requirements and

documented controls.

Regulatory & Standards Knowledge

You will bring a working understanding of relevant regulatory and industry frameworks,

including:

UK GDPR and the Data Protection Act 2018.

Data (Use and Access) Act 2025.

EU GDPR and other relevant international data protection regimes.

ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001.

AI governance and responsible AI frameworks, including the EU AI Act.

Information security risk management in cloud and SaaS environments.

Privacy impact assessments, individual rights handling and vendor risk management.

Core Skills & Personal Attributes

Highly organised, with excellent tracking, follow-up and attention to detail.

Strong written communication skills, with the ability to produce concise,

evidence-based assessments, findings and status reports.

Confident engaging with control owners, following up on actions and escalating

issues when progress stalls.

Pragmatic and solutions-focused, with the ability to balance governance

requirements against the realities of a fast-moving product environment.

Comfortable working collaboratively across multiple functions and levels of the

business.

Able to take ownership, manage competing priorities and work independently.

Preferred Certifications

Professional certifications are welcomed but are not mandatory.

Relevant qualifications include:

Privacy

CIPP/E

CIPM

Information Security & Management Systems

ISO/IEC 27001 Lead Implementer or Lead Auditor

ISO/IEC 27701 Lead Implementer or Lead Auditor

ISO/IEC 42001 Lead Implementer or Lead Auditor

Security & Risk

CISM

CRISC

CISSP

Why Join Intent HQ?Work at the Forefront of AI

Be part of a business operating at the intersection of AI, data analytics and privacy. You'll

help shape the governance and trust frameworks that enable innovative technology to scale

responsibly.

Make a Real Impact

We're a growing business with a relatively flat structure. Everyone has visibility and the

opportunity to make a meaningful contribution, not just within their own role but across the

organisation.

Grow Your Career

Work alongside experienced professionals across AI, Engineering, Data, Security and

Privacy, developing your expertise in an exciting and rapidly evolving industry.

Enjoy Flexibility

We believe great work comes from giving people the flexibility and support to perform at their

best. Our hybrid working approach combines collaboration in the office with remote working.

Our Working Environment

At Intent HQ, you'll have the opportunity to work with cutting-edge technology in an

environment where you are encouraged to think differently and challenge traditional

approaches.

We promote a collaborative, innovative and sociable culture, focused on performance,

personal development and competitive advantage.

Our flat structure means people are visible, their ideas are valued and everyone has the

opportunity to make an impact.

Flexibility, a family-friendly approach and a commitment to high cultural standards are central

to our DNA.

Benefits

We offer a range of benefits designed to support your wellbeing, development and work-life

balance:

Flexible and hybrid working.

Private medical insurance, subject to eligibility.

Free breakfast when working from the office.

26 days' annual leave, increasing with length of service.

Company pension scheme.

Income protection and Employee Assistance Programme.

Life assurance.

Enhanced maternity and paternity benefits above statutory minimums.

Company socials and events.

Wellbeing programme.

Cycle to Work scheme.

Training and professional development opportunities.

Diversity & Inclusion

Intent HQ is an equal opportunities employer, committed to promoting and practising

diversity, equality and inclusion in the workplace.

We value different perspectives, ideas and experiences, and are dedicated to creating an

environment where everyone feels respected, included and able to thrive.

Our commitment to diversity and inclusion has been recognised through two consecutive

Women in Tech UK Awards in the Best Tech Employer (51–149 Employees) category,

alongside recognition for our approach to parental support.

We believe that diverse teams create better ideas, stronger collaboration and more

meaningful innovation.

Ready to make an impact?

Join Intent HQ and help build the governance, privacy and security foundations that enable

the next generation of responsible AI.

Find out more: www.intenthq.com

Intent HQ is an equal opportunities employer.