GRC Lead

About Intent HQ

Intent HQ redefines customer understanding for the agentic era, enabling enterprises to influence customer decisions at the moments that determine growth, loyalty, and competitive advantage. As the Human-to-AI Context Company, we offer groundbreaking AI technology that creates the missing context of human behaviour and individuality, transforming data into confident decisions that reflect how people actually act in the real world. We enable brands to Act With Intent.

Trusted by global enterprises, Intent HQ manages 325M+ profiles and processes 250B events daily. We won AI Solution of the Year at the 2026 AI World Series Awards, AI Business of the Year (National AI Awards 2025), Analytics Company of the Year (British Data Awards 2025), and winner of Best AI Ethics & Diversity Strategy (AI World Series Awards 2025), recognising Intent HQ’s AI innovation, analytics excellence, and ethical leadership. Intent HQ is a proven partner for leaders seeking measurable growth, faster decision velocity, and responsible AI-driven advantage.

To learn more, visitwww.intenthq.com

Why Join Us:

• Exciting Work Environment: Work on cutting-edge technology at the intersection of AI and data analytics.

• Growth Opportunities: Advance your career in a fast-paced, innovative industry.

• Hybrid working: Based in our London office 2-3 days per week and the rest of the week remote, depending on your location.

The Opportunity:

Intent HQ is an AI and data analytics business helping some of the world's largest organisations better understand customer behaviour, generate actionable insights and deliver more personalised customer experiences.

As the business continues to develop its AI-driven technology and expand its enterprise client base, ensuring the responsible, secure and compliant use of data and AI is critical.

We are looking for a hands-on Governance, Risk & Compliance (GRC) Lead to own the operational delivery of governance, risk and compliance across three key areas:

• Information Security

• Data Privacy

• AI Governance

This is a mid-senior, hands-on role focused on making sure privacy, security and AI controls are embedded into the way Intent HQ builds, operates and delivers its products and services.

The role will work closely with Product, Engineering, Data, Legal, Security and Customer Success teams to ensure the business meets regulatory requirements, manages risk effectively and maintains the trust of its enterprise customers.

The successful candidate will not simply write policies or prepare for audits. They will ensure controls are implemented, tested, monitored and working effectively in real-world business and client-facing environments.

Key Responsibilities
1. Privacy & Data Protection

• Own the operational delivery of privacy compliance across the business.

• Ensure personal data is collected, processed, stored and used appropriately.

• Assess how customer data is analysed, enriched and used within AI-driven products and analytics platforms.

• Ensure privacy is built into products and services from the outset.

• Conduct and manage Data Protection Impact Assessments (DPIAs).

• Identify and manage privacy risks across products, services and client implementations.

• Ensure compliance with GDPR and relevant international privacy regulations.

• Work with Product and Engineering teams to embed privacy by design and by default.

2. AI Governance & Responsible AI

• Develop and implement AI governance frameworks and controls.

• Ensure AI systems and models are being used responsibly, transparently and appropriately.

• Assess risks associated with AI-driven analytics, profiling and personalisation.

• Ensure appropriate controls are in place around AI data usage, model development and deployment.

• Support compliance with emerging AI regulations, including the EU AI Act where applicable.

• Monitor AI-related risks and ensure appropriate accountability and oversight.

• Work with Product, Data and Engineering teams to embed responsible AI practices.

3. Information Security & Risk Management

• Own the operational delivery of information security governance and risk management.

• Ensure appropriate technical and organisational security controls are in place.

• Identify, assess and manage information security risks.

• Monitor control effectiveness and address weaknesses.

• Support security incident management and remediation.

• Work with technical teams to ensure customer and company data is protected.

• Maintain security policies, procedures, risk registers and control frameworks.

4. ISO Standards & Compliance

• Own the operational implementation and ongoing maintenance of:

  • ISO 27001 – Information Security Management.

  • ISO 27701 – Privacy Information Management.

  • ISO 42001 – AI Management Systems.

• Ensure controls are operating effectively, rather than simply documented.

• Coordinate internal and external audits.

• Manage compliance assessments, evidence collection and remediation activities.

• Track audit findings, corrective actions and ongoing improvements.

• Ensure the business remains audit-ready.

5. Cross-Functional Collaboration

• Work closely with Product and Engineering to ensure privacy, security and AI governance are built into product development.

• Partner with Data and Analytics teams to ensure appropriate data usage and processing.

• Work with Legal on regulatory requirements and contractual obligations.

• Support Sales and Customer Success teams with enterprise client security and privacy requirements.

• Help respond to customer due diligence, security questionnaires and compliance assessments.

• Act as the operational point of contact for governance, risk and compliance across the business.

6. Continuous Improvement & Reporting

• Monitor the effectiveness of governance, privacy and security controls.

• Identify areas of weakness and implement improvements.

• Maintain risk registers, compliance trackers and reporting dashboards.

• Provide regular updates to senior leadership on compliance status and emerging risks.

• Keep up to date with changes in AI regulation, data privacy and information security.

• Build a culture of responsible AI, privacy and security across the organisation.

What we’re looking for:

Essential Experience

• Proven experience in a GRC, Information Security, Privacy or Data Protection role.

• Experience working in a technology, SaaS, AI, data analytics or cloud-based business.

• Strong practical knowledge of GDPR and data protection requirements.

• Experience implementing and operating information security and privacy controls.

• Knowledge and experience of ISO 27001 and ISO 27701.

• Understanding of AI governance, responsible AI and emerging AI regulations.

• Experience conducting risk assessments, DPIAs and compliance reviews.

• Experience working with technical teams, including Product, Engineering and Data.

• Ability to translate regulatory requirements into practical business and technical controls.

• Experience preparing for and managing internal and external audits.

Technical & Regulatory Knowledge

• GDPR and international data protection regulations.

• ISO 27001 – Information Security.

• ISO 27701 – Privacy Information Management.

• ISO 42001 – AI Management Systems.

• AI governance and responsible AI frameworks.

• Data processing, profiling and analytics.

• Information security risk management.

• Cloud and SaaS security environments.

• Data protection impact assessments and vendor risk management.
  

Diversity & Inclusion

Intent HQ is an equal opportunities employer with an ethos of commitment to promoting and practicing diversity, equality and inclusion at work. At IHQ, different perspectives, ideas and experiences are valued and respected, with fair and equal opportunities provided for all. Our diversity and inclusion efforts have been recognised with us winning two consecutive Women in Tech UK Awards, under the Best Tech Employer (51-149 Employees)’ category & being shortlisted for the Best Employer for Parental Support award - an achievement we are very proud of. This year in 2024 we have been nominated again for the Best Tech Employer and our in house recruiter has been shortlisted for the Best In house Recruiter award!

Our Culture

Working for Intent HQ, you have the opportunity to work with cutting edge technology in an environment where you are encouraged to think and act outside traditional methods. We are a growing business with a flat structure meaning everyone is visible and able to make an impact, not just in their own role, but across the business on a daily basis. We promote a collaborative, innovative and sociable culture, oriented towards performance and competitive advantage. Our DNA is made up of flexibility to all staff with a family friendly approach and focus on personal development. We have high expectations and pride ourselves on our cultural standards.
Benefits

• Flexible working

• Private medical insurance, depending on eligibility

• Free breakfast daily (when in the office)

• 26 days holiday (increasing with service)

• Pension scheme

• Income Protection with Employee Assistance Programme

• Life Assurance

• Higher than statutory maternity/paternity benefits

• Work socials

• Wellbeing programme

• Cycle to work scheme

• Training opportunities