AI Governance Engineer

Wave Group; Madrid; Híbrido; EUR 100.000 - 130.000; Jornada completa

Descripción de la vacante

Wave Group in Madrid is seeking a regulatory compliance engineer to bridge Legal, Engineering and Security for EMEA, US, LATAM and APAC. You will translate regulatory requirements into concrete technical work and help ensure AI systems remain compliant, auditable and trustworthy as we scale.

You will lead design of compliance features (monitoring, logging, audit trails, human oversight, risk classification) and build dashboards and metrics for Legal, Security and leadership to monitor AI risk

Formación

• Fluent in English and Spanish with strong written & verbal skills.
• Knowledge of EU AI Act, ISO/IEC 42001, NIST AI RMF or equivalent.
• Hands-on engineering background with ability to escalate to Legal when needed.
• Experience advising engineering on compliance features: monitoring, logging, audit trails, human oversight, risk classification.
• Track record designing & maintaining compliance dashboards/metrics with clear data sources & logic.
• Working knowledge of GDPR and similar regimes: data mapping, DPIA support, privacy-by-design.
• Comfortable running AI risk/impact assessments and documenting aligned with ISO/IEC 42001 & EU AI Act.
• Startup pace, ownership, proactiveness, and ability to operate under ambiguity.
• Additional fluency in French, Portuguese or Italian.
• Experience monitoring regulatory landscape across multiple regions and flagging impact early.
• Prior in-house AI governance role at AI-native company; not pure consulting.
• Certifications such as CDMP/DAMA, ISO 42001 lead implementer/auditor or similar.

Responsabilidades

• Bridge Legal, Engineering and Security to track regulatory requirements across EMEA, US, LATAM and APAC.
• Translate regulatory interpretations into concrete technical requirements for the product.
• Advise Engineering on compliant features: monitoring, logging, audit trails, human oversight, risk classification.
• Design and maintain compliance dashboards and metrics for Legal, Security and leadership to view AI risk.

Conocimientos

English

Spanish

EU AI Act knowledge

GDPR knowledge

Educación

CDMP certification

ISO 42001 lead implementer/auditor

Descripción del empleo

Salary: €100-130k + up to 35% bonus (~20% standard, rest based on performance)

Equity: up to ~€80k

Location: Madrid (preferred) or Barcelona (1-2 office days)

Company: autonomous AI agents for enterprise clients

About the company

This rapidly scaling start-up is building an AI-native platform that lets enterprise clients run high-volume operations through autonomous, conversational agents — voice, chat and messaging, deployed across dozens of countries in over 60 languages, for some of the largest employers in the world.

The company's core technical challenge is multi-agent orchestration that stays rock-solid at scale — reliable, secure and observable whether it's deployed for a healthcare provider in the US or a retailer in Latin America.

Founded by an experienced team with two prior successful exits, backed by a top-tier European VC, and already trusted by household-name enterprise customers.

About the role

You'll sit between Legal, Engineering and Security — tracking regulatory requirements across EMEA, US, LATAM and APAC and translating them into concrete technical work, so the company's agentic systems stay compliant, auditable and trustworthy as it scales.

You'll advise Engineering on the compliance features that actually matter — monitoring, logging, audit trails, human oversight, risk classification — and design and maintain the compliance dashboards and metrics (including human-in-the-loop tracking) that give Legal, Security and leadership a clear view of AI risk.

You'll also run AI risk and impact assessments aligned to ISO/IEC 42001 and EU AI Act classifications, own technical GDPR compliance (plus equivalent regimes like CCPA/CPRA, LGPD, PIPL) — data mapping, DPIA support, privacy-by-design — and act as the technical point of contact for enterprise clients on responsible AI: questionnaires, due-diligence workshops, compliance reporting.

Must have requirements

• Professional fluency in English and Spanish
• Strong working knowledge of the EU AI Act, ISO/IEC 42001, NIST AI RMF and equivalent regional frameworks — enough to turn Legal's interpretations into concrete technical requirements
• Hands‑on engineering background — architecture, code, data flows, model behavior — with the judgment to know when to **escalate** ambiguous cases to Legal
• Experience advising engineering teams on compliance features: monitoring, logging, audit trails, human oversight, risk classification
• Track record designing and maintaining compliance dashboards/metrics — defining data sources, logic and known limitations
• Working technical knowledge of GDPR (and equivalent regimes — CCPA/CPRA, LGPD, PIPL): data mapping, DPIA support, privacy-by-design
• Comfortable running AI risk/impact assessments and maintaining system documentation aligned with ISO/IEC 42001 and EU AI Act classifications
• Startup pace and mentality - high energy, ownership, proactiveness, hunger to innovate and succeed, comfortable operating with ambiguity
• Additional fluency in French, Portuguese or Italian
• Experience monitoring the regulatory landscape across multiple regions (EMEA, US, LATAM, APAC) and flagging business/platform impact early
• Prior in-house AI governance role at an AI-native or agentic‑AI company, rather than pure consulting/advisory
• Certifications such as CDMP/DAMA, ISO 42001 lead implementer/auditor, or similar