Supports information security governance, risk, compliance, ISO 27001, DORA, and operational resilience activities. The role conducts security and AI risk assessments, manages controls and audit evidence, supports third-party assessments, administers Microsoft Defender and Purview, investigates alerts, contributes to incident response, and helps govern responsible AI adoption. It also delivers security awareness and phishing simulation activities while producing risk, compliance, and training metrics for stakeholders.
PoloWorks are currently recruiting this role on behalf of our parent company Marco Group.
As we continue to grow, we are looking for a Security GRC & AI Analyst to play a key role in strengthening our information security framework whilst supporting the safe and responsible adoption of AI technologies across the Group.
As we continue to grow, we are looking for a Security GRC & AI Analyst to play a key role in strengthening our information security framework whilst supporting the safe and responsible adoption of AI technologies across the Group.
This is a fantastic opportunity for a security professional who enjoys working across governance, risk, compliance, operational security and emerging technology, helping to shape how AI is governed within a modern insurance business.
Key Responsibilities
Reporting to the Information Security Management function, you will support the ongoing development of the Group's Information Security programme, with a focus on:
- Governance, Risk and Compliance (GRC)
- ISO 27001 certification and continuous improvement
- Operational Resilience (OpRes) and DORA compliance
- Microsoft Defender and Purview administration
- AI governance, risk management and responsible AI adoption
Working closely with Risk & Compliance teams, Technology, business leaders and third-party suppliers, you will help ensure Marco Group maintains strong security controls, manages risk effectively and adopts AI technologies in a secure and compliant manner.
Governance, Risk & Compliance- Support the maintenance and continuous improvement of information security policies, procedures and standards
- Assist with ISO 27001 certification activities, including control reviews, evidence collection and audit preparation
- Support DORA compliance activities, ICT risk management and remediation tracking
- Contribute to Lloyd's Operational Resilience (OpRes) requirements, including scenario testing and self-assessments
- Monitor compliance against recognised frameworks including ISO 27001, NIST CSF and Lloyd's requirements
- Identify, assess and track security and AI-related risks through to resolution
- Produce KRI/KPI reporting for governance forums and stakeholders
- Support third-party and supplier security assessments
- Support governance and oversight of AI tools used across Marco and PoloWorks, including Microsoft Copilot, Anthropic Claude and other AI-enabled platforms
- Maintain AI acceptable use standards, approval processes and usage records
- Conduct AI risk assessments for new use cases and integrations
- Monitor AI deployments for compliance with data protection, confidentiality and regulatory requirements
- Keep up to date with evolving AI governance frameworks and regulatory developments
- Support the creation of AI training, guidance and awareness materials
- Administer and maintain Microsoft Defender security controls and alerting
- Configure and support Microsoft Purview capabilities including DLP, sensitivity labels and insider risk controls
- Investigate security alerts and support incident response activities
- Participate in incident reviews, testing exercises and security improvement initiatives
- Provide practical security advice and guidance across the business
- Help deliver the Group's security awareness and phishing simulation programme
- Create engaging training content on security and responsible AI use
- Monitor and report on training participation and awareness metrics
Skills, Knowledge and Expertise
Essential Experience
- Experience in Information Security, ideally within a GRC, compliance or risk-focused role
- Practical knowledge of Microsoft Defender and Microsoft Purview
- Experience of security risk assessments, governance frameworks and security controls
- Understanding of ISO 27001 and security audit requirements
- Familiarity with AI governance, AI risk assessment or responsible AI adoption
- Knowledge of data protection and privacy requirements
- Strong analytical and problem-solving skills
- Excellent communication and stakeholder management skills
- A genuine interest in emerging technologies and AI
- Experience within the Lloyd's, London Market or wider insurance sector
- Knowledge of Lloyd's Minimum Standards, Principle 12 and Operational Resilience requirements
- Experience supporting DORA compliance programmes
- Knowledge of information classification and cryptography
We're interested in candidates who hold, or are working towards, one or more of the following:
- CISMP
- ISC2 CC
- ISO 27001 Lead Auditor or Lead Implementer
- CISM
- CISSP
- CRISC
- SANS certifications or equivalent
Microsoft certifications such as:
- SC-200
- SC-300
- SC-400
About
PoloWorks is the leading provider of UK-based support services to the insurance market. We have built a strong reputation as dedicated and dependable experts in our field. We pride ourselves on our ability to be flexible, responsive, and knowledgeable.As a leading service support company and turnkey managing agency, our clients choose us because our staff not only have the expertise but also a profound affinity with their business challenges. Our mission is to support, inspire, and develop the insurers of today and tomorrow.Our clients, whether digital start-ups or well-established organisations, rely on the PoloWorks team to develop and strengthen their businesses. Our clients' goals are our goals. As such we design and deliver bespoke solutions to their specific business challenges.Recognised as a Great Place to Work certified company and listed among the Best Workplaces in Financial Services & Insurance, PoloWorks is proud of its positive culture and commitment to its people. With offices in London and Cheltenham, PoloWorks has ambitious growth plans, offering exciting opportunities for anyone joining us on the next phase of our journey.It's our mission to unleash the potential in every team, and we know that teams perform best when they are diverse and every team member feels that they belong. It is the unique contributions of all PoloWorks colleagues that drive our success, and we are committed to building an inclusive culture where everyone is empowered to do meaningful work and are recognised for their efforts. To that end, we are committed to providing an environment free of discrimination for everyone.
Similar Jobs
Beauty • Robotics • Design • Appliances • Manufacturing
Lead consumer insights research across product development and go-to-market initiatives. Own qualitative and quantitative research from methodology selection and study design through moderation, analysis, synthesis, and recommendations. Identify consumer needs, manage research agencies, and translate findings into commercially relevant opportunities. Collaborate with UK, European, and global teams while managing multiple workstreams, budgets, timelines, and senior stakeholder communications.
Beauty • Robotics • Design • Appliances • Manufacturing
Processes and tracks sales and purchase orders, validates pricing and delivery timelines, coordinates shipments across EMEA, and manages relationships with logistics and freight partners. The role monitors supply chain activity, resolves order discrepancies, produces reports, supports operational projects, and provides service to internal and external customers.
Top Skills:
ErpExcel
Beauty • Robotics • Design • Appliances • Manufacturing
Develop mechanical systems, components, and assemblies for consumer products from concept through production launch. Create CAD models and engineering documentation, conduct analysis and tolerance assessments, build and test prototypes, and support verification, validation, compliance, supplier engagement, and manufacturing. Collaborate with design, electrical, software, quality, manufacturing, and supply chain teams while resolving technical issues and driving continuous improvement.
Top Skills:
3D CadCreoDfmaSolidworks
What you need to know about the Edinburgh Tech Scene
From traditional pubs and centuries-old universities to sleek shopping malls and glass-paneled office buildings, Edinburgh's architecture reflects its unique blend of history and modernity. But the fusion of past and future isn't just visible in its buildings; it's also shaping the city's economy. Named the United Kingdom's leading technology ecosystem outside of London, Edinburgh plays host to major global companies like Apple and Adobe, as well as a growing number of innovative startups in fields like cybersecurity, finance and healthcare.
