Privacy & AI Governance Specialist
On-siteTrondheim, Trøndelag, Norway
Job Summary
Design, implement, and continuously improve global privacy, data protection, and AI governance programs while advising stakeholders on privacy-by-design principles and regulatory requirements. Maintain comprehensive documentation including policies, Records of Processing Activities, data maps, and DPIA/PIA materials; conduct risk assessments for products, vendors, and business initiatives. Review agreements such as DPAs and SCCs, support vendor management and customer audits, and manage privacy incidents and breach response activities. Deliver training initiatives and monitor global regulatory developments to translate legal requirements into operational processes. Collaborate with cross-functional teams to embed governance into business operations and identify compliance gaps for remediation.
Required Qualifications
- Bachelor's degree or equivalent experience in Law, Information Governance, Information Security, Compliance, Risk Management, Business, Technology, or a related field
- 3+ years of experience in privacy, data protection, compliance, information governance, legal operations, security risk, or a related discipline
- Working knowledge of GDPR, UK GDPR, CCPA/CPRA, and other global privacy regulations
- Experience conducting or supporting DPIAs/PIAs, maintaining Records of Processing Activities (RoPA), data mapping, vendor privacy reviews, data subject rights, privacy-by-design initiatives, and incident response activities
- Familiarity with vendor management, risk management, customer audits, compliance reporting, and privacy/security contract reviews, including DPAs and SCCs
- Employment eligibility to work with Quorum Software in Norway
- Strong analytical, research, documentation, communication, and stakeholder management skills
- Excellent interpersonal, written, and verbal communication skills, including the ability to communicate complex regulatory concepts to technical and non-technical audiences
- Ability to manage multiple priorities in a fast-paced, global environment
- Critical-thinking, problem-solving, adaptability, and organizational skills
Desired Qualifications
- Previous experience with GRC, privacy, or compliance platforms (e.g., OneTrust or similar tools)
- Privacy certifications such as CIPP/E, CIPP/US, CIPM, CIPT, or equivalent
- Familiarity with emerging AI governance frameworks and regulations, including the EU AI Act and industry best practices
- Security or audit certifications such as CISSP, CISM, CISA, or equivalent
- Familiarity with Information Security principles and IT governance processes
- Experience supporting compliance assessments, internal or external audits, or regulatory reviews
- Previous experience working within a SaaS, cloud technology, or global software organization
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.