Security GRC & AI Analyst

About the role

We are seeking a Security GRC & AI Analyst to strengthen the information security framework of Marco Group and guide the responsible adoption of AI technologies. Reporting to the Information Security Management function, you will work across governance, risk, compliance and emerging AI tools within a modern insurance environment.

Key responsibilities

• Support ISO 27001 certification activities, including control reviews, evidence collection and audit preparation.
• Assist with DORA compliance, ICT risk management and operational resilience (OpRes) requirements.
• Maintain and improve information security policies, procedures and standards.
• Administer Microsoft Defender security controls and Microsoft Purview data‑loss prevention, sensitivity labels and insider risk features.
• Provide governance, risk assessment and oversight for AI tools such as Microsoft Copilot and Anthropic Claude.
• Conduct AI risk assessments, maintain acceptable‑use standards and monitor AI deployments for data‑protection and regulatory compliance.
• Track security and AI‑related risks, produce KRI/KPI reports and support third‑party supplier security assessments.
• Investigate security alerts, support incident response and contribute to security improvement initiatives.

Required profile

• Demonstrated experience with ISO 27001 certification processes.
• Knowledge of DORA and operational resilience frameworks.
• Familiarity with Microsoft Defender and Microsoft Purview administration.
• Understanding of AI governance, risk management and responsible AI adoption.
• Ability to work with risk & compliance teams, technology stakeholders and external suppliers.

Required skills

• ISO 27001
• DORA compliance
• Microsoft Defender
• Microsoft Purview
• AI governance (Microsoft Copilot, Anthropic Claude)
• NIST Cybersecurity Framework
• Lloyd’s Operational Resilience requirements
• KRI/KPI reporting