Security GRC & AI Analyst

Administer and maintain Microsoft Defender security controls and alerting

Configure and support Microsoft Purview capabilities including DLP, sensitivity labels and insider risk controls

Investigate security alerts and support incident response activities

Participate in incident reviews, testing exercises and security improvement initiatives

Provide practical security advice and guidance across the business

Help deliver the Group's security awareness and phishing simulation programme

Create engaging training content on security and responsible AI use

Monitor and report on training participation and awareness metrics

Experience in Information Security, ideally within a GRC, compliance or risk-focused role

Practical knowledge of Microsoft Defender and Microsoft Purview

Experience of security risk assessments, governance frameworks and security controls

Understanding of ISO 27001 and security audit requirements

Familiarity with AI governance, AI risk assessment or responsible AI adoption

Knowledge of data protection and privacy requirements

Strong analytical and problem-solving skills

Excellent communication and stakeholder management skills

A genuine interest in emerging technologies and AI

Experience within the Lloyd's, London Market or wider insurance sector

Knowledge of Lloyd's Minimum Standards, Principle 12 and Operational Resilience requirements

Experience supporting DORA compliance programmes

Knowledge of information classification and cryptography

CISMP

ISC2 CC

ISO 27001 Lead Auditor or Lead Implementer

CISM

CISSP

CRISC

SANS certifications or equivalent

SC-200

SC-300

SC-400