Privacy & AI Governance Specialist (Hybrid)

About the role

Quorum Software, a provider of digital technology for business workflows in the oil and gas sector, is looking for a Privacy & AI Governance Specialist to join its Information Security, Privacy & Compliance team in London. The role reports to the Data Protection Officer and supports the maturity of global privacy, data protection and AI governance programmes while navigating regulatory requirements across many jurisdictions. It is a hybrid work model.

Key responsibilities

• Support the design, implementation and continuous improvement of global privacy, data protection and AI governance programmes.
• Maintain privacy documentation such as policies, procedures, templates, playbooks, RoPA, data maps and DPIA/PIA materials.
• Advise stakeholders on privacy, data protection, vendor reviews, data subject rights, cross-border transfers, AI use cases and privacy-by-design.
• Carry out and support DPIAs, PIAs, TIAs, AI risk assessments and privacy reviews.
• Review customer and vendor agreements, including DPAs, SCCs, security schedules and AI/data use clauses.
• Support vendor management, customer audits, pre-sales security questionnaires, compliance reporting, privacy incidents and breach response.
• Maintain inventories of data processing activities, vendors, AI tools, data flows and risk assessments.
• Monitor regulatory developments and turn them into practical policies and processes.
• Deliver privacy, AI governance and information security training and awareness.
• Help identify and remediate compliance gaps and risks.

Required profile

• Bachelor's degree or equivalent experience in Law, Information Governance, Information Security, Compliance, Risk Management, Business, Technology or a related field.
• 3+ years of experience in privacy, data protection, compliance, information governance, legal operations, security risk or a related discipline.
• Employment eligibility to work in the UK; the company does not sponsor visas.

Required skills

• Working knowledge of GDPR, UK GDPR, CCPA/CPRA and other global privacy regulations.
• Experience with DPIAs/PIAs, RoPA, data mapping, vendor privacy reviews, privacy-by-design and incident response.
• Familiarity with vendor management, risk management, customer audits, compliance reporting and contract reviews (DPAs, SCCs).
• Preferred: GRC, privacy or compliance platforms such as OneTrust; privacy certifications (CIPP/E, CIPP/US, CIPM, CIPT); security/audit certifications (CISSP, CISM, CISA); familiarity with the EU AI Act; experience in a SaaS, cloud or global software organisation.