NLB Services
Security Governance & Policy Lead – AI
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Governance & Policy Lead – AI
Location: Remote within the UK
Experience: 6+ years in Information Security Governance, Risk & Compliance (GRC)
Role Overview
We are seeking an experienced Security Governance & Policy Lead – AI to own the policy, governance, and compliance framework for Claude Code. The role involves developing and maintaining AI security policies, leading regulatory compliance assessments, managing third-party vendor risk, delivering security awareness training, and reporting AI security risk posture to senior leadership and governance committees.
Key Responsibilities
AI Security Policy Development and Management
- Draft, maintain, and enforce the Claude Code Acceptable Use Policy.
- Develop and maintain the AI Data Classification Policy.
- Establish and manage the Agentic Action Policy.
- Own policy governance, review cycles, implementation, and ongoing compliance.
- Incorporate lessons learned from security incidents and audits into policy updates.
Regulatory Compliance and Governance
- Lead regulatory compliance assessments for Claude Code.
- Assess relevant obligations under GDPR, the EU AI Act, and applicable sector-specific requirements.
- Ensure AI governance and security policies reflect relevant regulatory and organisational requirements.
- Support the ongoing review of AI-related governance and compliance controls.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Third-Party Risk Management
- Conduct third-party risk assessments and manage ongoing monitoring of Anthropic as a vendor.
- Apply established third-party risk management methodologies.
- Review vendor-related security and compliance risks.
- Support ongoing oversight of third-party AI services.
Security Awareness and Training
- Develop and deliver mandatory security awareness training for Claude Code users.
- Communicate acceptable-use requirements, data handling responsibilities, and AI security policies.
- Promote awareness of security risks and user responsibilities when using enterprise AI tools.
AI Security Risk Reporting
- Report AI security risk posture to the CISO and AI Governance Committee.
- Communicate governance issues, compliance gaps, and risk findings to relevant stakeholders.
- Support governance reviews and ongoing improvement of AI security controls.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Policy Reviews and Continuous Improvement
- Coordinate annual policy reviews.
- Incorporate findings and lessons learned from incidents, audits, and compliance assessments.
- Maintain the effectiveness and relevance of AI security policies and governance processes.
Essential Skills and Experience
- 6+ years of experience in Information Security Governance, Risk & Compliance (GRC).
- Deep knowledge of GDPR and awareness of EU AI Act obligations.
- Experience drafting, implementing, maintaining, and reviewing enterprise security policies.
- Experience managing security policy lifecycles and governance processes.
- Knowledge of third-party risk management methodologies.
- Strong communication, stakeholder management, and reporting skills.
- Experience working with AI governance frameworks, particularly the NIST AI Risk Management Framework (NIST AI RMF).
- Experience in a regulated industry, such as financial services, healthcare, or defence.
- Relevant certification: CISM, CRISC, or ISO 27001 Lead Implementer.
Eligibility Requirements
- Applicants must be UK citizens.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location