> Markdown version of [/jobs/ext/3330073-grc-analyst](https://www.wearedevelopers.com/jobs/ext/3330073-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Analyst - **Company:** Radiant - **Location:** London, UK - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Data Centers, AI Infrastructure, Data Processing - **Published:** September 1, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=5e345a61a0a5bbf2 ## About the Role * Solid UK GDPR and data protection experience * Genuine curiosity about how controls actually work - you're not satisfied when "the box is ticked," you want to understand the journey behind it * Hyper-organised - you can run multiple concurrent workstreams (audits, questionnaires, training, policy updates) without anything slipping * A builder's mindset - comfortable creating and automating a process from nothing, not just following an existing playbook * Autonomous and idea-driven - you'll be directed on priorities, not micromanaged on approach * Mid-level compliance/GRC/information security experience - your background does not need to be from AI infrastructure, data centres, or a related industry * Confident stakeholder management - you'll work directly with Finance and Engineering/Technology leadership, not just within a compliance team, * Exposure to ISO 27001 or SOC 2 audit cycles * Exposure to business continuity or major incident processes * Familiarity with AI governance or emerging AI regulation * Interest in health & safety, environmental/ESG reporting, or physical security and facilities governance * Experience with GRC tooling (e.g. Vanta or equivalent) ## Description We're building out a dedicated Governance, Risk & Compliance function - moving from a mix of individual ownership and external consultancy support to a resourced team that scales with the business. As GRC Analyst, you'll project manage our compliance programme end-to-end, working alongside a Principal Security Engineer who owns the technical security posture. This is a builder's role. You won't be inheriting a mature, fully-documented programme - you'll be creating and automating the processes, evidence trails and tracking that don't fully exist yet. You'll have senior guidance close at hand, both internally and through Brookfield's governance frameworks, but you're the one who makes the programme run day to day. As Radiant's obligations grow - spanning business continuity, AI governance, and an expanding footprint into owned and operated data centre and powered-land infrastructure - this role will grow with them., * Own end-to-end project management of the compliance programme: support ISO 27001 / SOC 2 audits, manage the policy lifecycle, and handle customer security questionnaires and KYC onboarding * Manage data protection operations and training, with UK GDPR at the core * Build and continuously improve how we work - automate manual, currently ad hoc processes (evidence collection, policy tracking, questionnaire responses) rather than running them from scratch each time * Coordinate business continuity: BCP/DR obligations and ownership of the Major Incident process, including testing and evidencing * Support our AI governance work - our internal AI and engineering AI policies - and help us keep pace with a fast-moving regulatory backdrop (including the EU AI Act), covering data handling, human oversight and vendor assessment * Coordinate health & safety compliance as we expand into physical premises and data centre operations, helping build a proper H&S management system where none currently exists * Partner closely with Finance and Engineering/Technology leadership, particularly on KYC, Anti-Bribery & Corruption (ABC) evidence, and technical control documentation * Help benchmark and align our Code of Conduct and policies with Brookfield's * Contribute to the wider roadmap as our footprint grows: precious and conflict-minerals due diligence, export controls, and ESG/energy governance ## Related Videos - [Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing](https://www.wearedevelopers.com/videos/100108-building-sovereign-ai-lessons-from-deploying-secure-rag-systems-using-confidential-computing) - [The Sustainability Race: AI's Promises, Pitfalls and Potential](https://www.wearedevelopers.com/videos/100155-the-sustainability-race-ai-s-promises-pitfalls-and-potential) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Implementing continuous delivery in a data processing pipeline](https://www.wearedevelopers.com/videos/73-implementing-continuous-delivery-in-a-data-processing-pipeline) - [Your Enterprise RAG Has No Legal Basis](https://www.wearedevelopers.com/videos/100344-your-enterprise-rag-has-no-legal-basis) - [Building the Nervous System of AI - Michael Kagan (NVIDIA)](https://www.wearedevelopers.com/videos/2133-building-the-nervous-system-of-ai-michael-kagan-nvidia) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Graph and AI Trends 2026: Why Is AI Running but Not Yet Delivering?](https://www.wearedevelopers.com/magazine/680-graph-and-ai-trends-2026-why-is-ai-running-but-not-yet-delivering)