Now recruiting reviewers

Join the Assessment Board and grade the next generation of GRC.

An agent can check that an artefact is complete, consistent and correctly cited. It cannot judge whether a determination is one a competent professional would defend in front of a regulator. That judgement is what the board is for — and it is a decision with a reason code, not a report to write.

Remote & asynchronous ~10 minutes per decision Two working days to respond
What the board does

Review real submissions, not exam papers

Mentees complete simulated enterprise engagements inside our application, and an AI grader scores every step. You are pulled in at the 70 steps out of 280 where a determination is inherited by everything after it, or where the artefact stops being an exercise and goes out as real.

01

Read the artefact

Registers, policies, procedures, DPIAs, audit workpapers and continuity plans — the real deliverable, rendered in full on one screen.

02

Decide, don't write an essay

Approve or disapprove and pick from reason codes written for that specific gate. A free-text note is available and never required.

03

Judge what an agent cannot

The AI grader has already checked the work is complete, consistent and cited. You judge whether the determination is one you would defend to a regulator or a board.

Open positions

Reviewer roles

Each reviewer role maps to a NICE work role. Apply for the one your day job qualifies you to judge — the load shown is what a single mentee generates for that seat across a full 35-task rotation.

GRC Programme Manager
OG-PMA-001
18 gates · 9 tasks
11 reach a reviewer
Owns programme roadmaps, charters, resourcing and delivery governance.
Compliance Manager
OG-AUD-001
10 gates · 5 tasks
6 reach a reviewer
Owns regulatory obligations, control mapping and compliance status reporting; runs internal compliance assessments.
Internal Audit Lead
OG-AUD-002
10 gates · 5 tasks
5 reach a reviewer
Plans and performs control testing; owns workpaper standards, evidence quality and audit readiness.
Policy & Governance Analyst
OG-PLA-001
8 gates · 4 tasks
5 reach a reviewer
Drafts, reviews and publishes cybersecurity and data-privacy policy; owns the policy register and the governance document set.
Privacy Compliance Analyst
OG-PRI-002
6 gates · 3 tasks
3 reach a reviewer
Owns the record of processing, DPIA screening, lawful basis and the privacy notice — the gates where a wrong call is a statutory one.
Cyber Risk Manager
OG-RIS-001
6 gates · 3 tasks
3 reach a reviewer
Owns the risk framework, scoring anchors, treatment decisions and the risk register review cycle.
Business Continuity Coordinator
OG-MAP-001
4 gates · 2 tasks
3 reach a reviewer
Owns business impact analysis, RTO/RPO determination and ICT continuity documentation.
Security Awareness Lead
OG-CUR-001
4 gates · 2 tasks
2 reach a reviewer
Owns awareness content, delivery quality, knowledge assessment and training evidence.
Third-Party Risk Analyst
OG-SCRM-001
4 gates · 2 tasks
2 reach a reviewer
Owns supplier assessment, sub-processor governance and third-party contractual security terms.

All positions are voluntary board appointments, reviewed every 12 months. Every gate has a single reviewer — the role best placed to judge that particular determination — so a DPIA, a retention decision or an incident procedure goes to the specialist rather than to the analyst who owns the rest of the task. You may hold more than one seat.

Application

Apply to join the board

Tell us who you are and which reviewer position you want. We verify your background against the work role, then you decide five archived submissions with known outcomes as a calibration set before your first live card.

Minimum three years in the discipline you apply to review.
A LinkedIn profile we can match to your stated experience.
Capacity for roughly five decisions a month, carrying no more than two mentees at a time.
Independence: you will not review anyone you line-manage, and you disclose any work of your own that a submission touches.

Enter your email above first.

We use these details only to assess your board application.