Data Privacy & AI Governance Compliance Manager

Overview WELCOME TO SITA

We’re the team that keeps airports moving, airlines flying smoothly, and borders open. Our tech and communication innovations are the secret behind the success of the world’s air travel industry.

You’ll find us at 95% of international hubs. We partner closely with over 2,500 transportation and government clients, each with their own unique needs and challenges. Our goal is to find fresh solutions and cutting-edge tech to make their operations run like clockwork. Want to be a part of something big?

Are you ready to love your job? The adventure begins right here, with you, at SITA.

PURPOSE

We are seeking a motivated and enthusiastic Data Privacy & AI Governance Compliance Manager to join SITA’s Global Privacy & AI Office. The successful candidate will have a strong sense of professional curiosity and a passion for balancing technological innovation with internal controls, regulations and best practice. This role will be part of a dynamic international data compliance team.

Reporting to the SITA Chief Privacy Officer, this role will support senior members of the Global Privacy & AI Office to monitor and advance privacy local and regional privacy and AI compliance through analysis of data processing activities, risk assessments and second-line monitoring reviews to deliver a view of privacy and AI risks as they apply to SITA corporate and commercial activities and are aligned with applicable laws, regulations and best practice.

As part of the Second Line of Defence, this role will interface with colleagues in Legal, IT, Purchasing, HR, Security and operational stakeholders across the wider SITA organisation to monitor applicable controls, educate, track risks and provide KPIs for management reporting. The role will also support regulatory horizon scanning, identifying emerging AI requirements, assessing their potential impact, and helping to drive the actions required to achieve and maintain future-state compliance.

Responsibilities

• Represent the Global Privacy & AI Office in day-to-day activities to drive pragmatic privacy and AI risk identification and mitigation, policy compliance, education and awareness across SITA;
• Maintain and evolve relevant policies, frameworks and reporting processes;
• Execute privacy and AI risk assessments and support monitoring reviews, documenting evidence, ensuring robust audit trails and proactively monitoring risk mitigations to closure;
• Conduct vendor privacy and AI due diligence and maintain an inventory of related AI product and solution use cases;
• Provide timely reporting of relevant risks and KPIs whilst proactively identifying and facilitating mitigations to reduce known risks;
• Collaborate with internal stakeholders e.g. Legal, IT and Security to ensure the safe adoption of AI technologies across the organization as part of the wider unified management of AI risk;
• Conduct horizon scanning for applicable developments, such as new country laws or regulatory guidance, and provide analysis and recommendations for action;
• Design, support and deliver privacy and AI training and awareness;
• Fulfil the duties of local country Data Protection Officer where required;
• At the direction of the SITA Chief Privacy Officer, act as the front door for privacy and AI regulatory/customer enquiries and complaints; and
• Represent SITA externally at professional events, conferences, client-facing engagements and industry forums.

Qualifications EXPERIENCE

Successful Applicants Will Have The Following

• Minimum of 4+ years’ demonstrable experience working at middle-management level in a multinational environment within the second line of defence and ideally as a privacy officer;
• Robust knowledge of current and emerging privacy and AI risks and how these apply within an enterprise-level data compliance framework and associated compliance requirements; and
• Experience of implementing the EU AI Act and other applicable AI laws, regulations and best practice.

Skills

• Strong analytical and listening skills with the ability to convey complex technical privacy matters in simple terms to key stakeholders;
• Comfortable working independently, managing multiple priorities to deadlines whilst collaborating with multiple stakeholders and teams;
• Embraces a hands-on attitude to problem-solving and takes pride in owning deliverables as part of a high-performing team;
• Excellent English lang…