Security Governance and Policy Lead - 12 Months - Inside IR35 - Hybrid in Sheffield

Security Governance andamp; Policy Lead - 12 Months - Inside IR35 - Hybrid in Sheffield Role Overview A senior Security Governance andamp; Policy Lead specialising in AI. The position is responsible for owning the policy, governance, and compliance framework surrounding the deployment of an AI coding assistant (Claude Code) within a large, regulated enterprise. The role ensures the deployment meets regulatory obligations, manages vendor risk, and drives user awareness and accountability across the organisation. Key Responsibilities Draft, maintain, and enforce key AI-related security policies including Acceptable Use, Data Classification, and Agentic Action policies for Claude Code. Lead regulatory compliance assessments for the AI deployment, covering GDPR, EU AI Act obligations, and sector-specific requirements. Manage third-party risk assessment and ongoing monitoring of the AI vendor, ensuring robust supplier governance is maintained throughout the engagement. Develop and deliver mandatory security awareness training for Claude Code users, ensuring responsibilities are clearly understood across the organisation. Report on AI security risk posture to the CISO and AI Governance Committee, coordinating annual policy reviews and incorporating lessons from incidents and audits. Top 5 Skills Information security GRC expertise - 6+ years in information security governance, risk, and compliance, with proven experience writing and managing enterprise security policies ..... full job details .....