Pearson
Security, Privacy & AI Assurance Specialist

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security, Privacy & AI Assurance Specialist
In this role, you’ll help Pearson build customer trust and maintain recognised security, privacy and AI governance certifications. You’ll combine customer assurance, cross-functional consulting and certification management to ensure our responses, controls and evidence are accurate, clear and defensible.
This role aligns to industry-level titles such as Customer Assurance Specialist, Information Security Compliance Specialist, GRC Specialist, Security Assurance Specialist, and ISO Certification Specialist.
The Role
As a Security, Privacy & AI Assurance Specialist in Pearson’s Enterprise business unit, you’ll act as a specialist partner across Sales, Product, Engineering, Legal, Privacy and Information Security. You’ll help customers understand Pearson’s security, privacy and AI governance posture while supporting the controls, evidence and improvement activity needed to maintain our certifications.
The role brings together two closely connected areas: customer assurance and sales support, and certification and audit management. Throughout much of the year, you’ll manage security, privacy and AI governance questionnaires, RFPs, RFIs and due diligence requests. You’ll also support internal and external audits, certification activity and the resolution of non-conformities.
This is a specialist individual-contributor role for someone who can operate as a trusted subject matter expert. You do not need to be a software developer or cloud architect, but you should understand technology and cloud environments well enough to translate technical and governance information into practical, policy-aligned guidance.
What You'll Own
- Complete customer security, privacy, AI governance and compliance questionnaires, ranging from focused requests to large and detailed assessments.
- Support RFPs, RFIs, customer due diligence and ad-hoc assurance questions throughout the sales lifecycle.
- Review customer contracts and schedules to identify security, privacy, AI and compliance requirements, and assess them against Pearson controls, policies and certifications.
- Work with Sales, Legal, Privacy, Security, Product and Engineering teams to gather evidence, validate responses and resolve assurance queries.
- Participate in customer assurance discussions and explain Pearson’s security, privacy and AI governance position clearly and confidently.
- Maintain and improve the AI Security Agent knowledge base so that responses remain accurate, current and aligned with product and engineering developments.
- Develop reusable response content, evidence libraries and knowledge assets that improve the speed and consistency of customer assurance activity.
- Support the ongoing maintenance of ISO 27001 and ISO 27701 certifications and help progress new standards and attestations, including ISO 42001.
- Coordinate surveillance audits, recertification audits and internal assessments, representing Pearson during external certification activity.
- Own and progress remediation actions arising from audits, risk assessments and management reviews, working with process owners to implement and verify corrective action.
- Maintain certification documentation, policies, procedures, records and evidence repositories, and conduct gap assessments to identify improvement opportunities.
- Monitor developments in information security, privacy, AI governance and regulation to support continued compliance and customer confidence.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
About You
You bring practical experience in information security, privacy, GRC, compliance, customer assurance or certification. You are comfortable working across technical and non-technical teams, and you can turn complex requirements into clear actions and defensible customer responses.
- Hands-on experience with ISO 27001 and information security management systems is essential.
- Practical GDPR and privacy experience, together with audit or implementation experience.
- Experience supporting security or compliance audits, certification programmes, control implementation or remediation activity.
- Experience responding to customer security, privacy or compliance questionnaires, or closely related due diligence requests.
- Strong written communication, attention to detail and the ability to manage multiple priorities and deadlines.
- Confidence working as a subject matter expert with Sales, Legal, Privacy, Product, Engineering and Security stakeholders.
- A high-level understanding of cloud technology and SaaS environments; coding or software development experience is not required.
- A bachelor’s degree in a relevant discipline, or equivalent professional experience.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
It Would Be Great If You Also Have
- ISO 27001 Lead Implementer, Lead Auditor or an equivalent certification.
- Experience with ISO 27701 and/or ISO 42001 implementation or certification activity.
- Experience in third-party risk management, enterprise software, SaaS or technology products.
- Experience creating reusable assurance content, evidence repositories or knowledge bases.
- Knowledge of emerging AI governance frameworks and regulations.
What You'll Get
- A specialist role with visible impact on customer trust, business growth and Pearson’s assurance programme.
- The opportunity to help shape Pearson’s approach to security, privacy and responsible AI assurance.
- Broad exposure across Sales, Product, Engineering, Legal, Privacy, Information Security, Internal Audit, certification bodies and customers.
- A collaborative, matrixed environment where your expertise will guide teams and support continual improvement.
- A hybrid working arrangement, with office attendance agreed according to location and business needs.
- Access to Pearson’s UK rewards, benefits and professional development opportunities.
Ready to Make an Impact?
Apply now and help strengthen customer trust, support responsible innovation and shape the future of security, privacy and AI assurance at Pearson.
#LI-DM1 #LI-HYBRID
Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.
If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing TalentExperienceGlobalTeam@grp.pearson.com.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location