Não envies um currículo genérico — gera um currículo e uma carta de apresentação adaptados a esta função específica.
Expleo in Setúbal, Portugal, seeks a Data Protection & AI Governance specialist to lead the AI Data Protection Gate across use cases, ensuring GDPR and EU AI Act alignment.
You will document data flows, perform DPIAs, manage privacy risks, and maintain auditable evidence of compliance with engineering and product teams.
This role emphasizes collaboration, practical privacy guidance, and proactive governance across AI initiatives.
Expleo is a trusted partner for your innovation journey. As a global engineering, technology and consulting service provider, we are ideally positioned to help you achieve your ambitions and future-proof your business. With a smart blend of bold thinking and reliable execution, we're able to fast-track innovation through each step of your value chain. We are strategically positioned to build value, with global footprint across 30 countries. We are as global and local as you need us to be, with strong best-in-class pan-European technological centres and unique best-shoring capabilities. We leverage a network of high value-adding affiliates in consulting and industrial excellence, and leading partners across multiple sectors to provide you with the most comprehensive services and solutions in an ever-changing environment.
3+ years of experience in Data Protection, Privacy & AI Governance Own the AI Data Protection Gate for AI use cases, preparing decision-ready evidence and providing clear go/no-go recommendations. Translate GDPR, EU AI Act, internal Data Protection Frameworks and policies into practical technical guidance for AI engineers and platform teams. Handle the embedded Privacy by Design and by Default into AI solutions, ensuring compliance with lawful basis, purpose limitation, data minimisation, retention and transparency principles.
Produce and maintain comprehensive documentation, including data flows, RoPAs, design decisions, technical controls and safeguards, enabling effective review by Data Protection teams. Conduct privacy Risk Assessments, including DPIAs and AI risk analyses, identifying risks related to personal data processing, AI models and system architecture. Define and implement pragmatic risk mitigation measures in close collaboration with engineering teams, ensuring compliant and secure AI deployments.
Act as the liaison between engineering, product and Data Protection teams, ensuring technical implementations remained transparent, auditable and aligned with regulatory expectations. Responsible for enabled scalable AI governance by maintaining auditable evidence of compliance, accountability and technical implementation across AI initiatives. Coordinate data Subject Rights Requests (DSRs) involving AI systems and supported readiness for AI-related personal data incidents alongside AI Security and central Data Protection teams.