GRC - FTC 12 Months

Intent HQ builds AI that understands human intent in every form. Its technology is designed to help organisations recognise customer needs, act on it while it matters, and do so without compromising privacy. Intent HQ combines Edge AI, behavioural intelligence, and agentic operating systems to help businesses turn customer signals into measurable commercial outcomes.

Trusted by global enterprises, Intent HQ manages 325M+ profiles and processes 250B events daily. Intent HQ has been recognised as AI Solution of the Year at the AI World Series Awards 2026, AI Business of the Year (National AI Awards 2025), Analytics Company of the Year (British Data Awards 2025), and winner of Best AI Ethics & Diversity Strategy (AI World Series Awards 2025), acknowledging Intent HQ’s AI innovation, analytics excellence, and ethical leadership.

To learn more, visitwww.intenthq.com

We are seeking a Senior GRC Lead – Privacy, AI & Security to join our InfoSec & Privacy Operations team and deliver the day-to-day operation of our governance, risk and compliance programme across information security, privacy and AI.

This is a hands-on, operational role. The postholder runs the processes, evidence, assessments and tracking that keep our management systems working in practice, under the direction of the VP of InfoSec & Privacy Operations.

The role supports our certified and certifiable management systems:

• ISO 27701 (Privacy Information Management) – primary operational focus
• ISO 27001 (Information Security)
• ISO 42001 (AI Management Systems)

The role has a strong practical emphasis on privacy control operation, particularly where personal data is processed, analysed, inferred or enriched using AI and advanced analytics, in line with our privacy by design and by default approach.

Intent HQ already has established frameworks in each area, including a PIA Gateway process for privacy impact assessment and an AI governance policy suite overseen by our Emerging Tech, AI & Ethics Committee. The job is to make them work in practice: implemented, tested, monitored and evidenced in real business and client-facing environments.

The role reports to the VP of Infosec and Privacy Operations, works alongside Intent HQ’s independent Data Protection Officer (DPO), who advises on and monitors privacy compliance, and with our Product, Engineering, Data, Legal, Security and Customer Success teams.

Management System Operation

• Operate the day-to-day processes of the ISO 27701, ISO 27001 and ISO 42001 management systems in line with the scope and priorities set by the VP
• Maintain the risk register, Statement of Applicability, control register and integrated control mappings across the three standards
• Identify, assess and record information security, privacy and AI risks across products, services and client implementations, escalating to the VP
• Maintain the GRC calendar: scheduled reviews, control tests, policy review dates and audit milestones
• Prepare inputs for management review, including metrics, open actions and control status

• 3–5 years of hands-on operational GRC experience, with exposure across information security, privacy and AI or emerging technology risk
• Working knowledge of UK GDPR, the DPA 2018 (both as amended by the DUAA 2025) and EU GDPR, applied to analytics and AI
• Hands-on experience running PIAs/DPIAs for analytics or data-driven products and handling individual rights requests
• Experience operating controls, collecting evidence and supporting audits against ISO 27001 and/or ISO 27701
• Experience maintaining risk registers, control frameworks and remediation trackers
• Experience working with engineering and data teams to document data flows and track remediation
• Experience in a technology, SaaS, AI, data analytics or cloud-based business
• SOC 2 Type II audits
• ISO/IEC 42001
• A management system standard transition (e.g. ISO/IEC 27701:2025)
• AI-enabled, analytics-heavy or martech environments

Technical Understanding

• Able to follow complex data flows, transformations and AI/ML or agentic analytics pipelines well enough to assess privacy and security controls
• Understands inference, aggregation and re-identification risk in multi-client environments
• Able to ask informed questions of technical teams using regulatory and framework reasoning, without acting as an engineer

Regulatory & Standards Knowledge

• UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025; EU GDPR; other international data protection regimes
• ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001
• AI governance and responsible AI frameworks, including the EU AI Act
• Information security risk management in cloud and SaaS environments
• Privacy impact assessment, individual rights handling and vendor risk management
• Highly organised, with strong tracking, follow-up and attention to detail
• Clear written communication: assessments, findings and status reports that are concise and evidence-based
• Confident following up with control owners and escalating early when issues stall
• Pragmatic in a fast-moving product environment

Certifications (Preferred, Not Mandatory)

• Privacy: CIPP/E, CIPM
• ISO 27001 / ISO 27701 Lead Implementer or Lead Auditor
• ISO 42001 Lead Implementer or Lead Auditor
• Security/risk: CISM, CRISC, CISSP

Diversity & Inclusion

Intent HQ is an equal opportunities employer with an ethos of commitment to promoting and practicing diversity, equality and inclusion at work. At IHQ, different perspectives, ideas and experiences are valued and respected, with fair and equal opportunities provided for all. Our diversity and inclusion efforts have been recognised with us winning two consecutive Women in Tech UK Awards, under the Best Tech Employer (51-149 Employees)’ category & being shortlisted for the Best Employer for Parental Support award - an achievement we are very proud of. This year in 2024 we have been nominated again for the Best Tech Employer and our in house recruiter has been shortlisted for the Best In house Recruiter award!

Our Culture

Working for Intent HQ, you have the opportunity to work with cutting edge technology in an environment where you are encouraged to think and act outside traditional methods. We are a growing business with a flat structure meaning everyone is visible and able to make an impact, not just in their own role, but across the business on a daily basis. We promote a collaborative, innovative and sociable culture, oriented towards performance and competitive advantage. Our DNA is made up of flexibility to all staff with a family friendly approach and focus on personal development. We have high expectations and pride ourselves on our cultural standards.

• Exciting Work Environment: Work on cutting-edge technology at the intersection of AI and data analytics.
• Growth Opportunities: Advance your career in a fast-paced, innovative industry.
• Hybrid working: Based in our London office 2-3 days per week and the rest of the week remote, depending on your location.
• Flexible working
• Private medical insurance, depending on eligibility
• Free breakfast daily (when in the office)
• 26 days holiday (increasing with service)
• Pension scheme
• Income Protection with Employee Assistance Programme
• Life Assurance
• Higher than statutory maternity/paternity benefits
• Work socials
• Wellbeing programme
• Cycle to work scheme
• Training opportunities