Senior Data Protection & AI Advisor

Michael Page; Barcelona; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Meal vouchers

Private health insurance

Life Insurance

Hybrid working model (2 days home)

Job summary

Michael Page is seeking a senior Data Protection professional to support the Global Legal Data Protection Team in Barcelona. You will advise on privacy, AI governance, and compliance with EU data protection laws, including the EU AI Act, and collaborate with stakeholders to embed privacy by design across initiatives.

You will lead regulatory assessments of AI systems, manage data transfer mechanisms, and coordinate responses to inquiries, investigations, and audits while progressing privacy

Qualifications

• Law degree required and qualified to practice data protection law.
• Substantial GDPR expertise with multinational scope.
• Experience advising on AI governance, AI risk management, and regulatory implications.

Responsibilities

• Advise on privacy, data protection, AI governance, and digital transformation initiatives.
• Lead legal and regulatory assessment of AI systems and use cases.
• Embed privacy by design and conduct risk assessments with mitigation strategies.

Skills

GDPR expertise

AI governance

Data protection

Regulatory risk

Stakeholder management

Education

Law degree

Job description

This role will support the Data Protection Team, in Global Legal, playing a pivotal role in ensuring the company's compliance with data protection laws and regulations, safeguarding customer and employee data, and providing legal expertise on data privacy matters. They will live by the Michael Page values, take pride, be passionate, never give up, work as a team and make it fun.

At the heart of Michael Page's business are the thousands of people's lives we change, the outstanding service we provide to our clients and candidates and the exciting opportunities within our offices all over the world. We're proud to set the standard in the recruitment profession - our specialist service with a personal touch is how we change lives for people through creating opportunity to reach potential.
Michael Page was established in the UK in 1976. We're now a FTSE 250 organization with operations in 36 countries, providing recruitment services and career opportunities at a local regional and global level.

Description

• Advise on privacy, data protection, AI governance, and digital transformation initiatives, providing pragmatic legal guidance on emerging technologies and regulatory requirements, including the EU AI Act.
• Lead the legal and regulatory assessment of AI systems and use cases, leveraging significant experience in AI governance, AI compliance, and AI risk management to support innovation while ensuring compliance with applicable laws, including the EU AI Act.
• Partner with business stakeholders across functions to embed privacy by design into projects and initiatives, conducting risk assessments and delivering pragmatic mitigation strategies.
• Support executive decision-making by identifying and managing privacy, technology, and regulatory risks associated with business innovation.
• Manage privacy due diligence and vendor risk assessment processes, and draft, review, and negotiate data protection agreements, including data processing, data sharing, and international data transfer agreements with third parties.
• Advise on international data transfer mechanisms, including SCCs, Transfer Impact Assessments (TIAs), UK IDTA/Addendum, and other transfer frameworks.
• Provide support with interactions with supervisory authorities and regulators, including investigations, consultations, complaints, inspections, and enforcement matters.
• Manage responses to data subject complaints, regulatory inquiries, and audits.
• Lead legal assessment of personal data breaches and coordinate notification obligations across jurisdictions.
• Provide strategic advice during cyber incidents and crisis management situations.
• Develop, implement, and continuously improve the organisation's privacy governance framework.
• Oversee privacy policies, standards, procedures, and controls across multiple jurisdictions.
• Monitor updates and changes to privacy laws and regulations, ensuring timely adaptation.

Profile

• Law Degree.
• Minimum +5 years' experience advising on privacy and data protection matters, including substantial GDPR expertise.
• Demonstrable experience advising on AI governance, AI risk management, and the legal and regulatory implications of developing, procuring, deploying, and using AI systems, including practical knowledge of the EU AI Act and emerging AI regulatory frameworks.
• Significant experience advising senior stakeholders on AI strategy, AI governance, and technology-related regulatory risks in a multinational environment.
• Experience conducting AI-related legal and compliance assessments, including evaluating AI use cases, governance frameworks, transparency requirements, vendor arrangements, and regulatory risks.
• Experience in a large, complex global organisation.
• Strong knowledge of global data protection laws and frameworks.
• Recruitment, HR-tech, SaaS, technology, healthcare, financial services, or other data-intensive sector experience would be advantageous.
• CIPP/E strongly preferred.
• Relevant AI certifications (e.g., AIGP, ISO/IEC 42001, AI governance certifications, or equivalent) are strongly desirable.
• Additional certifications such as CIPM, CIPT, AI governance certifications, ISO 27701, or similar professional qualifications are advantageous.

Job Offer

Competitive salary aligned with your experience
Permanent, full-time contract
Meal vouchers
Private health insurance
Life Insurance
Hybrid working model (2 days of home office/week)
Multicultural environment
Training and internal development opportunities
A vibrant and dynamic international workplace located in Barcelona
Start date: ASAP