Data Protection & AI Governance Advisor (m/w/d)

About This Opportunity

We are representing a confidential SaaS organization in München that is building a robust data protection and AI governance function. This is a hands-on advisory role where you will shape how privacy, compliance, and emerging AI regulation are implemented across product and operations.

Responsibilities

• Support business functions in documenting data processing activities and maintain records under GDPR Article 30
• Conduct data protection impact assessments, legitimate interest assessments, and transfer impact assessments
• Advise product and engineering teams on privacy-by-design principles, including data minimization, tenant separation, access controls, and deletion processes
• Review data processing agreements and conduct preliminary assessments of third-party service providers and AI tools
• Maintain the data protection management system: update policies and templates, perform controls, track remediation measures, and manage the governance platform
• Build and maintain an inventory of AI systems in use; classify systems under the EU AI Act (Article 6, Annex III) and determine organizational roles (provider vs. deployer)
• Contribute to the approval process for AI initiatives by developing evaluation criteria, gates, and decision frameworks
• Create mandatory AI documentation covering risk management, data governance, bias assessment, technical documentation, human oversight, logging, and transparency obligations
• Assess AI models and services for contractual commitments on training data use, data residency, and alignment with customer obligations

What We're Looking For

• Minimum three years of professional experience in data protection, with substantial time in a second-line function such as privacy coordination, compliance, governance, or external advisory with comparable audit responsibility
• Proven experience conducting DPIAs, LIAs, and TIAs
• Strong working knowledge of GDPR at the regulatory level, familiarity with EDPB guidelines, and understanding of case law on third-country transfers and controller/processor responsibilities
• Demonstrable exposure to AI governance and the EU AI Act—such as AI system classification, LLM-based feature evaluation, model or bias reviews, transparency disclosures, or development of AI policies (full AI Act expertise not required; willingness to build depth on the job is sufficient)
• Structured, reliable working style with high attention to detail in documentation
• Fluent German and English (negotiation level)
• Preferred: Law degree and certification such as IAPP CIPP/E, CIPM, or AIGP; for qualified lawyers, the client supports the process toward Syndikusrechtsanwalt admission
• Valid EU work authorization required; visa sponsorship is not available for this position

How We Work with You

Candidates apply directly through Get A Job.ai. Our recruiting team will conduct an initial screening to understand your background and ensure alignment with the role. Once we confirm a strong match, we will submit your profile to our client for consideration. Please do not contact the employer directly—all communication and coordination will be managed by our talent team to ensure a smooth and professional process.

Pay

Compensation details will be discussed during the screening process and are aligned with experience and market standards for senior privacy and governance roles in München.

Equal Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome candidates of all backgrounds and ensure fair consideration throughout the recruitment process.