Privacy & AI Governance Specialist (Hybrid Work Model

Privacy & AI Governance Specialist

Location:

London, England

Are you excited by challenges? Do you enjoy working in a fast-paced, international and dynamic environment? Then now is the time to join Quorum Software, a rapidly growing company and industry leader in oil & gas transformation.

Quorum Software is the world's largest provider of digital technology focused solely on business workflows that empower the next evolution of energy. From emerging companies to supermajors, throughout every region of the globe, customers rely on Quorum's proven innovation and unmatched global expertise to streamline business operations and make data-driven decisions that optimize profitability and growth. Our industry-leading solutions are transforming energy companies across the entire value chain, helping visionary leaders evolve their organizations into modern energy companies.

We are currently seeking a Privacy & AI Governance Specialist to join our Information Security, Privacy & Compliance team. As a Privacy & AI Governance Specialist, you will report to our Data Protection Officer. In this role, you will support the continued maturity of Quorum's global privacy, data protection, and AI governance programs while helping the business navigate evolving regulatory requirements across multiple jurisdictions.

You will collaborate with cross‑functional stakeholders to embed privacy‑by‑design and responsible AI practices into business processes, products, and services while supporting compliance, innovation, and operational excellence. You will also contribute to vendor management, customer assurance activities, and the continuous improvement of Quorum's governance framework.

• Support the design, implementation, and continuous improvement of Quorum's global privacy, data protection, and AI governance programs.
• Maintain privacy documentation, including policies, procedures, templates, playbooks, Records of Processing Activities (RoPA), data maps, and DPIA/PIA materials.
• Advise internal stakeholders on privacy, data protection, vendor reviews, data subject rights, cross‑border data transfers, AI use cases, and privacy‑by‑design principles.
• Conduct and support Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), Transfer Impact Assessments (TIAs), AI risk assessments, and privacy reviews for products, vendors, systems, and business initiatives.
• Review customer and vendor agreements, including Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), security schedules, and AI/data use provisions.
• Support vendor management activities, customer audits, pre‑sales security questionnaires, compliance reporting, privacy incidents, and breach response activities.
• Maintain privacy and AI governance inventories, including data processing activities, vendors, AI tools, data flows, and associated risk assessments.
• Monitor global privacy, cybersecurity, and AI regulatory developments, translating legal and regulatory requirements into practical policies, standards, and operational processes.
• Deliver privacy, AI governance, and information security training and awareness initiatives across the organization.
• Collaborate closely with enterprise and business unit stakeholders to integrate privacy, data protection, and AI governance principles into products, services, and business operations.
• Identify, investigate, and help remediate compliance gaps and areas of risk to support ongoing regulatory compliance and continuous improvement.
• Proactively research and maintain a working knowledge of emerging privacy, AI governance, cybersecurity, and data protection laws, regulations, and industry best practices.
• And other duties as assigned.

• Bachelor's degree or equivalent experience in Law, Information Governance, Information Security, Compliance, Risk Management, Business, Technology, or a related field.
• 3+ years of experience in privacy, data protection, compliance, information governance, legal operations, security risk, or a related discipline.
• Working knowledge of GDPR, UK GDPR, CCPA/CPRA, and other global privacy regulations.
• Experience conducting or supporting DPIAs/PIAs,…