Senior Data Protection & AI Advisor

Competitive salary aligned with your experience
Permanent, full-time contract
Meal vouchers
Private health insurance
Life Insurance
Hybrid working model (2 days of home office/week)
Multicultural environment
Training and internal development opportunities
A vibrant and dynamic international workplace located in Barcelona
Start date: ASAP

This role will support the Data Protection Team, in Global Legal, playing a pivotal role in ensuring the company's compliance with data protection laws and regulations, safeguarding customer and employee data, and providing legal expertise on data privacy matters. They will live by the Michael Page values, take pride, be passionate, never give up, work as a team and make it fun.

• Help protect data and drive meaningful impact.
• Be part of a team that makes privacy matter.

• Advise on privacy, data protection, AI governance, and digital transformation initiatives, providing pragmatic legal guidance on emerging technologies and regulatory requirements, including the EU AI Act.
• Lead the legal and regulatory assessment of AI systems and use cases, leveraging significant experience in AI governance, AI compliance, and AI risk management to support innovation while ensuring compliance with applicable laws, including the EU AI Act.
• Partner with business stakeholders across functions to embed privacy by design into projects and initiatives, conducting risk assessments and delivering pragmatic mitigation strategies.
• Support executive decision-making by identifying and managing privacy, technology, and regulatory risks associated with business innovation.
• Manage privacy due diligence and vendor risk assessment processes, and draft, review, and negotiate data protection agreements, including data processing, data sharing, and international data transfer agreements with third parties.
• Advise on international data transfer mechanisms, including SCCs, Transfer Impact Assessments (TIAs), UK IDTA/Addendum, and other transfer frameworks.
• Provide support with interactions with supervisory authorities and regulators, including investigations, consultations, complaints, inspections, and enforcement matters.
• Manage responses to data subject complaints, regulatory inquiries, and audits.
• Lead legal assessment of personal data breaches and coordinate notification obligations across jurisdictions.
• Provide strategic advice during cyber incidents and crisis management situations.
• Develop, implement, and continuously improve the organisation's privacy governance framework.
• Oversee privacy policies, standards, procedures, and controls across multiple jurisdictions.
• Monitor updates and changes to privacy laws and regulations, ensuring timely adaptation.