Role overview
As Senior Director - Technology GRC, you will lead the governance, risk and compliance capability for IFS Cloud, Product and Technology.
Your remit covers the security, data protection, compliance and responsible AI governance requirements applicable to our products, technology environment and cloud services.
You will define and oversee a consistent Technology GRC framework that enables Product, Engineering, Cloud and Technology teams to identify, assess, manage and evidence risk throughout the product and service lifecycle.
You will partner with enterprise-level control owners to align the Technology GRC program with wider company frameworks and obligations, providing subject-matter leadership and escalation for material technology risks.
Your mandate is to make security, data protection, compliance and AI governance integral to how products and cloud services are designed, developed, released and operated.
Success requires rigorous oversight, practical business enablement and strong influence across technical and non-technical stakeholders.
Duties and accountabilities
Technology GRC strategy and operating model
- Develop and execute the GRC strategy and roadmap for Cloud, Product and Technology, aligned with the wider Trust and Intelligence strategy.
- Establish the Technology GRC operating model, including decision rights, governance forums, risk ownership, escalation routes and accountability across Product, Engineering, Cloud and Technology.
- Translate enterprise risk, security, privacy and compliance requirements into practical technology standards, controls and governance processes.
- Define measurable reporting for technology risk, control effectiveness, remediation, compliance readiness and customer assurance.
- Advise senior Product and Technology leaders on the risk and compliance implications of product strategy, technology investment and cloud-service decisions.
Cybersecurity governance for Cloud, Product and Technology
- Establish and oversee cybersecurity governance requirements for product development, technology platforms and cloud services.
- Partner with Cybersecurity, Engineering and Cloud Operations to embed security requirements into architecture, secure development, release and operational processes.
- Oversee governance for technology security risks, control gaps, exceptions and remediation commitments.
- Ensure relevant security controls are clearly owned, consistently evidenced and regularly assessed.
- Provide GRC oversight for material cybersecurity risks affecting products, technology platforms and cloud services.
Data protection and compliance for Cloud, Product and Technology
- Embed privacy and data-protection requirements into product design, architecture, engineering and cloud operations.
- Partner with Data Protection and Legal specialists to interpret regulatory and contractual requirements for technical teams.
- Oversee governance for data classification, data handling, retention, access, cross-border processing and related technology controls.
- Support compliance obligations relevant to cloud and software services, including GDPR, CCPA, SOC 2, ISO 27001, FedRAMP and NIST-based requirements, where applicable.
- Monitor remediation of technology-related data-protection and compliance gaps through closure.
AI governance for products and technology
- Establish and mature governance standards for the use of AI within IFS products and technology.
- Translate responsible AI principles and applicable AI requirements into product development controls, documentation and approval processes.
- Establish proportionate risk-assessment and governance requirements for AI use cases, including higher-risk or customer-impacting applications.
- Partner with Product, Engineering, AI/ML, Cybersecurity, Data Protection and Legal teams to address security, privacy, transparency, auditability, model and data risks.
- Define governance gates and evidence requirements across the AI lifecycle, including design, development, testing, release, monitoring and material change.
- Oversee governance for agentic and autonomous capabilities, including controls addressing unintended behavior, data exposure, prompt-based attacks, traceability and human oversight.
Controls, assurance and compliance readiness
- Establish and maintain a coherent technology control framework a
Senior Director, Technology GRC in London employer: Ifs1
At Ifs1 in London, we pride ourselves on being an exceptional employer that fosters a collaborative and innovative work culture. As an AI Program Manager, you will have access to extensive professional development opportunities, allowing you to grow your skills while working on cutting-edge AI solutions that drive real impact for our enterprise customers. Our commitment to employee well-being and success, combined with the vibrant atmosphere of London, makes Ifs1 a truly rewarding place to advance your career.
