AI Governance Lead

Wave Group; Madrid; Híbrido; EUR 90.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity up to €80k

Hybrid work model

Descripción de la vacante

Wave Group seeks a senior AI governance professional to bridge Legal, Engineering, and Security, translating complex regulatory requirements into scalable technical solutions. Your role ensures agentic AI systems remain compliant, auditable, and trustworthy as the company scales across multiple regions.

You will lead the development of risk assessments, monitoring and logging frameworks, and privacy-by-design practices, aligning with GDPR, CCPA/CPRA, LGPD, and PIPL.

Formación

• Fluency in English and Spanish required.
• Knowledge of EU AI Act, ISO 42001 and NIST RMF.
• Experience advising engineering teams on compliance features.
• Experience designing compliance dashboards and metrics.
• GDPR data mapping and DPIA support knowledge.
• Auditing and risk classification capabilities.
• Ability to operate in a fast-paced startup environment.
• Certifications such as CDMP/DAMA, ISO 42001 lead implementer/auditor preferred.

Responsabilidades

• Define and translate regulatory requirements into technical specs across EMEA, US, LATAM and APAC.
• Advise engineering on essential compliance features: monitoring, logging, audit trails, human oversight and risk classification.
• Design and maintain compliance dashboards and metrics for Legal, Security and leadership.
• Lead AI risk and impact assessments aligned to ISO/IEC 42001 and EU AI Act classifications; oversee GDPR compliance.
• Act as technical point of contact for enterprise clients on responsible AI and regulatory questionnaires.

Conocimientos

English and Spanish fluency

EU AI Act knowledge

ISO/IEC 42001 familiarity

NIST AI RMF awareness

GDPR knowledge

Compliance dashboards

In-house AI governance

Startup environment

ISO 42001 certifications

Risk assessment

Herramientas

Monitoring tools

Logging systems

Privacy-by-design approaches

Descripción del empleo

Salary: up to ~€120k + up to 35% bonus (~20% standard, rest based on performance)

Equity: up to ~€80k

Location: Madrid (preferred) or Barcelona (1-2 office days)

Company: autonomous AI agents for enterprise clients

About the company

This rapidly scaling start-up is building an AI-native platform that lets enterprise clients run high-volume operations through autonomous, conversational agents — voice, chat and messaging, deployed across dozens of countries in over 60 languages, for some of the largest employers in the world.

The company's core technical challenge is multi-agent orchestration that stays rock-solid at scale — reliable, secure and observable whether it's deployed for a healthcare provider in the US or a retailer in Latin America.

Founded by an experienced team with two prior successful exits, backed by a top-tier European VC, and already trusted by household-name enterprise customers.

About the role

You'll sit between Legal, Engineering and Security — tracking regulatory requirements across EMEA, US, LATAM and APAC and translating them into concrete technical work, so the company's agentic systems stay compliant, auditable and trustworthy as it scales.

You'll advise Engineering on the compliance features that actually matter — monitoring, logging, audit trails, human oversight, risk classification — and design and maintain the compliance dashboards and metrics (including human-in-the-loop tracking) that give Legal, Security and leadership a clear view of AI risk.

You'll also run AI risk and impact assessments aligned to ISO/IEC 42001 and EU AI Act classifications, own technical GDPR compliance (plus equivalent regimes like CCPA/CPRA, LGPD, PIPL) — data mapping, DPIA support, privacy-by-design — and act as the technical point of contact for enterprise clients on responsible AI: questionnaires, due-diligence workshops, compliance reporting.

Must have requirements:

• Professional fluency in English and Spanish
• Strong working knowledge of the EU AI Act, ISO/IEC 42001, NIST AI RMF and equivalent regional frameworks — enough to turn Legal's interpretations into concrete technical requirements
• Hands-on engineering background — architecture, code, data flows, model behavior — with the judgment to know when to escape ambiguous cases to Legal
• Experience advising engineering teams on compliance features: monitoring, logging, audit trails, human oversight, risk classification
• Track record designing and maintaining compliance dashboards/metrics — defining data sources, logic and known limitations
• Working technical knowledge of GDPR (and equivalent regimes — CCPA/CPRA, LGPD, PIPL): data mapping, DPIA support, privacy-by-design
• Comfortable running AI risk/impact assessments and maintaining system documentation aligned with ISO/IEC 42001 and EU AI Act classifications
• Startup pace and mentality - high energy, ownership, proactiveness, hunger to innovate and succeed, comfortable operating with ambiguity
• Additional fluency in French, Portuguese or Italian
• Experience monitoring the regulatory landscape across multiple regions (EMEA, US, LATAM, APAC) and flagging business/platform impact early
• Prior in-house AI governance role at an AI-native or agentic-AI company, rather than pure consulting/advisory
• Certifications such as CDMP/DAMA, ISO 42001 lead implementer/auditor, or similar