Information Security and AI Governance Compliance Manager

About the role

NexaQuanta, a UK‑based AI consultancy, is looking for an experienced professional to lead its information security and AI governance compliance programmes. The role combines ISO 27001 information security management, ISO 42001 AI management, and data protection responsibilities.

Key responsibilities

• Maintain and continuously improve the ISO 27001 Information Security Management System (ISMS).
• Conduct internal security audits, risk assessments and manage incident response processes.
• Coordinate external certification and surveillance audits for ISO 27001.
• Develop and sustain the ISO 42001 AI Management System (AIMS) and related governance frameworks.
• Create AI risk assessment frameworks, monitoring controls and documentation of AI models.
• Support client engagements on AI governance, ISO 42001 implementation and responsible AI policies.
• Act as Data Protection Officer, ensuring GDPR compliance, privacy policy maintenance and DPIA execution.
• Maintain organisational risk registers, deliver compliance training and monitor regulatory developments.

Required profile

• Minimum 5 years of experience in information security, compliance or governance roles.
• Proven track record managing ISO 27001 and/or ISO 42001 programmes.
• Experience acting as Data Protection Officer or handling GDPR compliance.

Required skills

• ISO 27001 Information Security Management System.
• ISO 42001 AI Management System.
• GDPR and Data Protection Impact Assessments (DPIAs).
• Security audit and risk assessment methodologies.
• Incident response and breach reporting procedures.

What we offer

• Opportunity to shape responsible AI adoption for global enterprise clients.
• Collaborative environment with leading AI and security experts.
• Professional development in emerging AI governance standards.