GRC Analyst

An innovative, fast-growing AI technology company is looking for a GRC Analyst to support its customer trust, security assurance, and compliance programmes as it continues to scale internationally. This is a highly visible, customer-facing GRC role sitting at the intersection of security, compliance, technology and client engagement. You will work closely with Security, Engineering, Legal and commercial teams to ensure the organisation's security and privacy posture is clearly understood and accurately represented to customers and partners. The role would suit someone who enjoys working in a fast-paced technology environment and is comfortable translating technical security concepts into clear, commercially appropriate language. The Role You will:

• Support customer trust and security assurance activities, including responding to security questionnaires, customer inquiries and risk assessments.
• Act as a key point of contact during customer security reviews, working with internal technical teams to provide accurate and timely responses.
• Maintain and improve security documentation, customer-facing materials and compliance evidence.
• Work closely with Security and Engineering teams to understand and articulate technical controls in a customer-facing context.
• Support compliance initiatives across frameworks including SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials and GDPR.
• Assist with evidence collection, audit preparation and ongoing compliance activities.
• Identify recurring risks, questions and control gaps arising from customer engagements and contribute to improvements.
• Help develop and streamline GRC, trust and security assurance processes as the organisation grows.
• Engage with enterprise customers and stakeholders on security, risk, privacy and compliance matters. What We're Looking For
• Experience in a customer-facing security, GRC, compliance, trust or security assurance role, ideally within a SaaS, cloud or technology environment.
• Experience translating technical security concepts into clear, concise written responses for non-technical stakeholders.
• Good understanding of enterprise security expectations covering areas such as cloud infrastructure, identity and access management, data protection and incident response.
• Strong attention to detail and the ability to manage multiple customer requests and priorities simultaneously.
• Excellent written and verbal communication skills.
• Confidence communicating with both technical and non-technical stakeholders.
• Good judgement when dealing with sensitive, complex or ambiguous security and compliance questions.
• Genuine interest in the intersection of technology, security, compliance and customer engagement. Desirable Experience Experience with one or more of the following would be advantageous: Security questionnaires | Customer security reviews | Third-party risk assessments | Security audits | SOC 2 | ISO 27001 | ISO 42001 | EU AI Act | GDPR | Cyber Essentials | Cloud Security | AWS | GCP | Kubernetes | IAM | SaaS Security | Enterprise Technology Experience working with financial services or other highly regulated customers would also be highly valuable.