Security, Privacy & AI Assurance Specialist

Security, Privacy & AI Assurance Specialist 

In this role, you’ll help Pearson build customer trust and maintain recognised security, privacy and AI governance certifications. You’ll combine customer assurance, cross-functional consulting and certification management to ensure our responses, controls and evidence are accurate, clear and defensible. 

This role aligns to industry-level titles such as Customer Assurance Specialist, Information Security Compliance Specialist, GRC Specialist, Security Assurance Specialist, and ISO Certification Specialist. 

The Role 

As a Security, Privacy & AI Assurance Specialist in Pearson’s Enterprise business unit, you’ll act as a specialist partner across Sales, Product, Engineering, Legal, Privacy and Information Security. You’ll help customers understand Pearson’s security, privacy and AI governance posture while supporting the controls, evidence and improvement activity needed to maintain our certifications. 

The role brings together two closely connected areas: customer assurance and sales support, and certification and audit management. Throughout much of the year, you’ll manage security, privacy and AI governance questionnaires, RFPs, RFIs and due diligence requests. You’ll also support internal and external audits, certification activity and the resolution of non-conformities. 

This is a specialist individual-contributor role for someone who can operate as a trusted subject matter expert. You do not need to be a software developer or cloud architect, but you should understand technology and cloud environments well enough to translate technical and governance information into practical, policy-aligned guidance. 

What You'll Own 

• Complete customer security, privacy, AI governance and compliance questionnaires, ranging from focused requests to large and detailed assessments. 
• Support RFPs, RFIs, customer due diligence and ad-hoc assurance questions throughout the sales lifecycle. 
• Review customer contracts and schedules to identify security, privacy, AI and compliance requirements, and assess them against Pearson controls, policies and certifications. 
• Work with Sales, Legal, Privacy, Security, Product and Engineering teams to gather evidence, validate responses and resolve assurance queries. 
• Participate in customer assurance discussions and explain Pearson’s security, privacy and AI governance position clearly and confidently. 
• Maintain and improve the AI Security Agent knowledge base so that responses remain accurate, current and aligned with product and engineering developments. 
• Develop reusable response content, evidence libraries and knowledge assets that improve the speed and consistency of customer assurance activity. 
• Support the ongoing maintenance of ISO 27001 and ISO 27701 certifications and help progress new standards and attestations, including ISO 42001. 
• Coordinate surveillance audits, recertification audits and internal assessments, representing Pearson during external certification activity. 
• Own and progress remediation actions arising from audits, risk assessments and management reviews, working with process owners to implement and verify corrective action. 
• Maintain certification documentation, policies, procedures, records and evidence repositories, and conduct gap assessments to identify improvement opportunities. 
• Monitor developments in information security, privacy, AI governance and regulation to support continued compliance and customer confidence. 

About You 

You bring practical experience in information security, privacy, GRC, compliance, customer assurance or certification. You are comfortable working across technical and non-technical teams, and you can turn complex requirements into clear actions and defensible customer responses. 

• Hands-on experience with ISO 27001 and information security management systems is essential. 
• Practical GDPR and privacy experience, together with audit or implementation experience. 
• Experience supporting security or compliance audits, certification programmes, control implementation or remediation activity. 
• Experience responding to customer security, privacy or compliance questionnaires, or closely related due diligence requests. 
• Strong written communication, attention to detail and the ability to manage multiple priorities and deadlines. 
• Confidence working as a subject matter expert with Sales, Legal, Privacy, Product, Engineering and Security stakeholders. 
• A high-level understanding of cloud technology and SaaS environments; coding or software development experience is not required. 
• A bachelor’s degree in a relevant discipline, or equivalent professional experience. 

It Would Be Great If You Also Have 

• ISO 27001 Lead Implementer, Lead Auditor or an equivalent certification. 
• Experience with ISO 27701 and/or ISO 42001 implementation or certification activity. 
• Experience in third-party risk management, enterprise software, SaaS or technology products. 
• Experience creating reusable assurance content, evidence repositories or knowledge bases. 
• Knowledge of emerging AI governance frameworks and regulations. 

What You'll Get 

• A specialist role with visible impact on customer trust, business growth and Pearson’s assurance programme. 
• The opportunity to help shape Pearson’s approach to security, privacy and responsible AI assurance. 
• Broad exposure across Sales, Product, Engineering, Legal, Privacy, Information Security, Internal Audit, certification bodies and customers. 
• A collaborative, matrixed environment where your expertise will guide teams and support continual improvement. 
• A hybrid working arrangement, with office attendance agreed according to location and business needs. 
• Access to Pearson’s UK rewards, benefits and professional development opportunities. 

Ready to Make an Impact? 

Apply now and help strengthen customer trust, support responsible innovation and shape the future of security, privacy and AI assurance at Pearson. 

#LI-DM1 
#LI-HYBRID