Data Privacy & AI Governance Compliance Manager

Job Summary

We are seeking a motivated and enthusiastic Data Privacy & AI Governance Compliance Manager to join SITA's Global Privacy & AI Office. The successful candidate will have a strong sense of professional curiosity and a passion for balancing technological innovation with internal controls, regulations and best practice. This role will be part of a dynamic international data compliance team. Reporting to the SITA Chief Privacy Officer, this role will support senior members of the Global Privacy & AI Office to monitor and advance privacy local and regional privacy and AI compliance through analysis of data processing activities, risk assessments and second-line monitoring reviews to deliver a view of privacy and AI risks as they apply to SITA corporate and commercial activities and are aligned with applicable laws, regulations and best practice. As part of the Second Line of Defence, this role will interface with colleagues in Legal, IT, Purchasing, HR, Security and operational stakeholders across the wider SITA organisation to monitor applicable controls, educate, track risks and provide KPIs for management reporting. The role will also support regulatory horizon scanning, identifying emerging AI requirements, assessing their potential impact, and helping to drive the actions required to achieve and maintain future-state compliance.

Responsibilities

• Represent the Global Privacy & AI Office in day-to-day activities to drive pragmatic privacy and AI risk identification and mitigation, policy compliance, education and awareness across SITA
• Maintain and evolve relevant policies, frameworks and reporting processes
• Execute privacy and AI risk assessments and support monitoring reviews, documenting evidence, ensuring robust audit trails and proactively monitoring risk mitigations to closure
• Conduct vendor privacy and AI due diligence and maintain an inventory of related AI product and solution use cases
• Provide timely reporting of relevant risks and KPIs whilst proactively identifying and facilitating mitigations to reduce known risks
• Collaborate with internal stakeholders e.g. Legal, IT and Security to ensure the safe adoption of AI technologies across the organization as part of the wider unified management of AI risk
• Conduct horizon scanning for applicable developments, such as new country laws or regulatory guidance, and provide analysis and recommendations for action
• Design, support and deliver privacy and AI training and awareness
• Fulfil the duties of local country Data Protection Officer where required
• At the direction of the SITA Chief Privacy Officer, act as the front door for privacy and AI regulatory/customer enquiries and complaints
• Represent SITA externally at professional events, conferences, client-facing engagements and industry forums

Qualifications

Experience

• Minimum of 4+ years demonstrable experience working at middle-management level in a multinational environment within the second line of defence and ideally as a privacy officer
• Robust knowledge of current and emerging privacy and AI risks and how these apply within an enterprise-level data compliance framework and associated compliance requirements
• Experience of implementing the EU AI Act and other applicable AI laws, regulations and best practice

Skills

• Strong analytical and listening skills with the ability to convey complex technical privacy matters in simple terms to key stakeholders
• Comfortable working independently, managing multiple priorities to deadlines whilst collaborating with multiple stakeholders and teams
• Embraces a hands-on attitude to problem-solving and takes pride in owning deliverables as part of a high-performing team
• Excellent English language written and verbal communication skills
• Demonstrable understanding and experience of OneTrust or equivalent compliance platform
• Strong team player with a positive attitude, sense of humour and a desire to learn

Relevant Professional Qualifications

• IAPP privacy and AI qualifications are a mandatory requirement of this role
• IT audit qualifications, such as ISO 42001 Lead Auditor, CRISC and CISA, are highly desirable

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.