> Markdown version of [/jobs/ext/3878034-information-security-and-ai-grc-manager](https://www.wearedevelopers.com/jobs/ext/3878034-information-security-and-ai-grc-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security and AI GRC Manager

- **Company:** ADEY Limited
- **Location:** Leeds, UK
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, Information Security Management, RSA Archer Platform
- **Published:** October 23, 2026
- **Apply:** https://polypipe.wd103.myworkdayjobs.com/Careers/job/Genuit-Leeds/Information-Security-and-AI-GRC-Manager_JR102516

## About the Role

* ISACA CISA certification.
 * Current ISO/IEC 27001 Lead Auditor and Lead Implementer certifications.
 * Experience implementing and managing ISO/IEC 27001 within a manufacturing environment.
 * Experience achieving ISO 27001 and Cyber Essentials/Cyber Essentials Plus certification.
 * Strong knowledge of information security governance, risk management and control assurance.
 * Working knowledge of ISO/IEC 42001, ISO 22301, CIS Critical Security Controls, UK GDPR and EU GDPR.
 * Experience managing audits, control testing and remediation activities.
 * Excellent policy-writing and stakeholder management skills, with the ability to communicate complex technical issues to senior stakeholders and Board audiences.
 * Professional work experience in both the UK and EU.., * ISO/IEC 42001 or ISO 22301 Lead Auditor/Implementer certification.
 * ISACA CISM or CRISC, or ISC2 CISSP.
 * AI governance qualifications such as IAPP AIGP or ISACA AI certifications.
 * Knowledge of ISO 27701, NIST frameworks, EU AI Act, NIS2 or IEC 62443.
 * Experience within a UK-listed, multi-site or multi-brand organisation.
 * Experience using GRC platforms and managing supplier assurance programmes.

## Description

Genuit Group is recruiting an Information Security and AI GRC Manager to develop and continually improve the Group's information security governance, risk and compliance (GRC) programme. Reporting to the Group Head of Information and Cyber Security, you will lead the development and continuous improvement of Genuit Group's information security governance, risk and compliance (GRC) programme. This includes information security assurance, risk management, business continuity, supplier assurance and AI governance.

You will assess and strengthen the Group's security controls, provide independent assurance to Executive leadership and the Board, and support the Board's declaration on material controls under Provision 29 of the UK Corporate Governance Code. Business and technology owners remain accountable for their controls and risks; your role is to provide the framework, challenge and assurance that supports them, * Lead and maintain the Group's information security management approach in line with ISO/IEC 27001.

 * Assess security maturity against recognised standards and frameworks and drive improvement plans.
 * Provide evidence-based assurance over material information security and technology controls.
 * Plan and coordinate control testing, audits and certification activities.
 * Maintain information security risk registers and compliance obligations.
 * Develop and manage information security and AI policies, standards and procedures.
 * Support business continuity and resilience activities in line with ISO 22301.
 * Coordinate supplier and third-party security assurance.
 * Establish and maintain AI governance in line with ISO/IEC 42001.
 * Produce clear assurance reporting for Executive and Board audiences