Data Protection & AI Governance Business Partner

About the role

Meritus Talent is seeking a Data Protection & AI Governance Business Partner to support a leading software organisation. The role is remote and focuses on embedding privacy and responsible AI practices across a portfolio of technology products and services.

Key responsibilities

• Lead supplier assurance reviews for AI systems and data protection matters, assessing contractual and technical controls.
• Identify and remediate gaps in Article 30 Records of Processing Activities (RoPA) across the business.
• Facilitate Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs) and AI Impact Assessments.
• Provide pragmatic advice on UK GDPR, Data Protection Act 2018, PECR, ISO 27701 and AI governance principles.
• Support the implementation and continuous improvement of privacy‑by‑design and responsible AI controls.
• Collaborate with Product, Engineering, Technology, Operations, HR, Legal and Security teams to embed compliance requirements.
• Assist the Data Protection Officer and Head of Data Protection & AI Governance on compliance projects and governance reporting.

Required profile

• CIPP/E qualification.
• 4‑5 years of experience in a software house, SaaS provider or technology‑led organisation.
• Proven experience with GDPR compliance, supplier assurance and privacy impact assessments.
• Familiarity with emerging AI governance practices within a software development environment.

Required skills

What we offer

• 4‑month contract (inside IR35) with a daily rate up to £500.
• Remote working flexibility.
• Opportunity to shape privacy and AI governance frameworks in a leading tech company.