Director, Data & AI Risk Management

On-site in Barcelona·Full-time·Added 5 days ago

AstraZeneca

36 open roles

Apply

What they offer

Full-time hours
Per the ad.

What they ask for

Have the right to work in Spain
AstraZeneca doesn't mention sponsorship in the ad.
Work in English
English is required, per the ad.
Work on-site in Barcelona
No relocation package mentioned.

The role

We're building a connected, end-to-end Enterprise AI engine - uniting data foundations, AI technology, process reinvention, and business-facing AI to accelerate results across the whole value chain. Success depends on being exceptional connectors: you'll actively leverage existing capabilities, celebrate and promote reuse, export breakthrough ideas across geographies and functions, and obsess over scaling impact rather than building in isolation. If you thrive in high-collaboration environments where your role is to turn complex, cross-functional problems into reusable, enterprise-wide capabilities - and where the measure of success is adoption and scale, not just innovation - you'll have the platform (and sponsorship) to make it real.

The Director, Data & AI Risk Management, leads and delivers enterprise risk management activities that help AstraZeneca identify, assess, govern, report, and reduce Data & AI risk.

The role provides practical risk advisory, consulting, governance, and risk appetite support across regulatory compliance, data protection, AI governance, and related risk domains.

Reporting to the Senior Director, Data & AI Risk Management, the Director partners across Data & AI Trust and Assurance and with business and enabling functions to translate complex risk and regulatory expectations into clear decisions, proportionate mitigations, and measurable improvements in risk posture.

The role also leads cross-functional projects and supports enterprise governance forums and Enterprise Risk Management reporting, enabling responsible and confident use of Data & AI at scale.

What you'll do

Provide trusted risk advisory, consulting, and risk appetite support across Data & AI risks, helping stakeholders make timely, proportionate, and well-informed decisions.
Provide governance and business analysis support across regulatory compliance, data protection, AI governance, and other Data & AI risk areas, translating complex requirements into clear risk positions, decisions, and actions.
Lead and/or project manage priority initiatives across Data & AI Trust and Assurance, irrespective of team boundaries, including Standards and Controls rollout and regulatory compliance programmes covering requirements such as the US Data Security Program, EU AI Act, European Health Data Space, and other emerging obligations.
Improve visibility of Data & AI risk posture by developing clear narratives, indicators, dashboards, and insights on material exposures, trends, mitigations, residual risk, and progress against appetite.
Engage business and functional stakeholders to build relationships and understand risk exposure, challenge the adequacy of mitigations, agree pragmatic remediation, and help drive residual risk and overall risk posture down.
Lead selected aspects of Data & AI risk aggregation, analysis, and reporting for Enterprise Risk Management, senior leadership, and governance bodies.
Facilitate risk assessments, workshops, and decision forums for complex or novel Data & AI use cases, balancing enablement, compliance, and protection of patients, the company, and its information and intellectual property.
Synthesize complex issues into concise, executive-ready narratives; anticipate stakeholder concerns; navigate ambiguity; and influence decisions in high-stakes forums.
Partner with Regulatory Intelligence, Legal, Compliance, Privacy, Cyber Risk, Enterprise Risk Management, Data Offices, and risk teams in R&D, Operations, Commercial, Enabling Units, and other business functions to align risk approaches and accountabilities.
Work across Data & AI Trust and Assurance teams to accomplish shared goals, resolve cross-cutting issues, and deliver integrated outcomes across policy, standards and controls, assurance, monitoring, risk, and regulatory readiness.
Identify opportunities to simplify and continuously improve Data & AI risk management processes, governance, reporting, and stakeholder experience while preserving effective oversight.
Promote a culture of responsible, compliant, and value-focused use of Data & AI, demonstrating AstraZeneca values in all interactions.

Requirements

What we're looking for

Bachelor's degree in business administration, Risk Management, Information/Data Science, Informatics, Computer Science, Economics, Law, or a related discipline, or equivalent relevant experience.
Significant experience in risk management, assurance, governance, regulatory compliance, or second-line oversight within a complex, global organisation.
Demonstrated experience assessing and managing data, technology, digital, and/or AI risks and translating complex issues into pragmatic business decisions.
Strong project leadership and project management capability, including delivery through cross-functional and matrixed teams, such as Regulatory Compliance, areas of organisational risk, AI governance, or related disciplines.
Experience providing risk advisory or consulting support, including risk appetite, mitigation, escalation, and risk acceptance discussions.
Working knowledge of relevant Data & AI regulatory and compliance requirements, such as the US Data Security Program, EU AI Act, European Health Data Space, GDPR, GxP, NIS2, or comparable frameworks.
Experience with governance forums, executive reporting, risk indicators, dashboards, or Enterprise Risk Management processes.
Strong business analysis, facilitation, and problem-solving skills, with the ability to structure ambiguity and establish clear ownership and actions. This includes working across domains such as regulatory compliance, data protection, AI governance, or related disciplines to translate requirements into clear risk positions, decisions, accountabilities, and actions.
Demonstrated experience developing risk reporting to support senior management decision-making.
Proven ability to build partnerships across Legal, Compliance, Privacy, Cyber Security, Enterprise Risk Management, Data Offices, technology, and business functions.
Excellent written and verbal communication, with the credibility to influence senior stakeholders and present concise, decision-oriented recommendations.
Strong collaboration, negotiation, and change leadership skills, with a practical, proportionate, and enablement-focused mindset.

Nice to have

Master's degree or advanced qualification in Business Administration, Risk Management, Information/Data Science, Informatics, Computer Science, Economics, Law, or a related discipline.
Experience in life sciences, healthcare, or another highly regulated industry.
Practical knowledge of ISO/IEC 42001, the NIST AI Risk Management Framework, or recognised enterprise risk and control frameworks.
Data, AI, privacy, compliance, audit, governance, or risk management education and professional certifications.
Experience implementing or assessing standards and controls and linking regulatory obligations, risks, controls, assurance, and reporting.
Knowledge of key pharmaceutical business processes across R&D, Operations, Commercial, and Enabling Units.

How they hire

2 steps1 interviewa task to do

Application
Recruiter contact · With a recruiter
Assessment
Not every role
Some roles, especially graduate roles, add a game-based assessment, a video or telephone interview, or an assessment day.
Interview
A two-way conversation about your skills and suitability for the role, and a chance for you to find out if AstraZeneca is right for you.
Pre-employment screening
Offer

Candidates who reach interview stage or beyond usually get feedback within 14 days of the role's closing date.
Interview travel expenses are reimbursed for journeys over 100km.
Alcohol and drug testing is carried out for new hires where required by local country legislation.

About AstraZeneca

AstraZeneca is a global, science-led biopharmaceutical company that discovers, develops, and commercializes prescription medicines in therapeutic areas including oncology, cardiovascular, renal and metabolism, and respiratory and immunology. With a workforce of over 80,000 employees worldwide, the company is headquartered in Cambridge, UK, and operates across more than 100 countries, focusing on innovative medicines and advanced technologies like AI and data science to transform patient care.

In Spain, AstraZeneca has a significant presence with offices in Madrid and Barcelona, contributing to clinical development, regulatory affairs, and commercial operations. The company is known for its collaborative and inclusive culture, offering international professionals opportunities to work on global projects, particularly in areas like cell therapy, AI-driven health solutions (Evinova), and patient safety. With a strong commitment to diversity and innovation, AstraZeneca Spain is an attractive destination for talent seeking to make a global impact while living in Spain.

Industry: Pharma
Founded: 1999
Employees: 10,000+
Headquarters: Cambridge, UK
In Spain: Madrid, Barcelona
Website: astrazeneca.es

Good to know if you are moving

AstraZeneca offers a global, multicultural work environment with opportunities to collaborate with colleagues across the world.
The company has a strong commitment to employee development and offers various career growth programs.
Spain offices are located in major cities like Madrid and Barcelona, offering a high quality of life and vibrant culture.
AstraZeneca is a leader in innovative therapies, providing employees with the chance to work on cutting-edge medical advancements.
The company supports flexible working arrangements and promotes a healthy work-life balance.

In their own words

Additional information

At AstraZeneca we're dedicated to being a Great Place to Work. Where you are empowered to push the boundaries of science and unleash your entrepreneurial spirit. There's no better place to make a difference to medicine, patients and society. An inclusive culture that champions diversity and collaboration, and always committed to lifelong learning, growth and development. We're on an exciting journey to pioneer the future of healthcare.

When we put unexpected teams in the same room, we unleash bold thinking with the power to inspire life-changing medicines. In-person working gives us the platform we need to connect, work at pace and challenge perceptions. That's why we work, on average, a minimum of three days per week from the office. But that doesn't mean we're not flexible. We balance the expectation of being in the office while respecting individual flexibility.

18-sept-2026

06-oct-2026

AstraZeneca embraces diversity and equality of opportunity. We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills. We believe that the more inclusive we are, the better our work will be. We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics. We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.

All open roles at AstraZeneca