Overview In this role you will lead enterprise Data & AI risk management efforts to identify, assess, govern, report, and reduce risk across regulatory, data protection, and AI governance domains. You will translate complex risk expectations into pragmatic actions, partnering with cross-functional teams to enable responsible, scalable use of Data & AI. You will drive governance, reporting, and risk posture improvements, balancing enablement with compliance.

This is a high-impact role in a collaborative, matrixed environment that values risk-informed decision-making.

Compensaciones / Incentivos hybrid work model inclusive culture commitment to lifelong learning and development

Responsabilidades

Provide trusted risk advisory across Data & AI risks to support timely, proportionate decisions

Support governance across regulatory compliance, data protection, and AI governance with clear risk positions and actions

Lead priority initiatives (standards, controls, regulatory programs like US Data Security Program, EU AI Act, European Health Data Space) across team boundaries

Improve visibility of risk posture via narratives, dashboards, and indicators of material exposures, mitigations, and residual risk

Engage stakeholders to understand risk exposure, challenge mitigations, and drive remediation to reduce residual risk

Lead aspects of risk aggregation, analysis, and reporting for Enterprise Risk Management and senior leadership

Facilitate risk assessments and decision forums for complex Data & AI use cases balancing enablement and protection

Synthesize issues into executive-ready narratives and influence high-stakes decisions





Partner with Legal, Compliance, Privacy, Cyber Risk, Data Offices, and risk teams to align risk approaches

Drive continuous improvement of risk management processes, governance, and stakeholder experience

Promote a culture of responsible, compliant, value-focused Data & AI usage and uphold AstraZeneca values

Requisitos principales Bachelors degree in a related discipline or equivalent experience

Significant experience in risk management, governance, regulatory compliance, or second-line oversight in a global organization

Experience assessing and managing data, technology, digital, or AI risks and translating issues into pragmatic decisions

Strong project leadership and cross-functional delivery experience

Experience providing risk advisory including risk appetite, mitigation, escalation, and acceptance discussions

Knowledge of regulatory/compliance frameworks such as US Data Security Program, EU AI Act, European Health Data Space, GDPR, NIS2

Experience with governance forums, executive reporting, risk indicators, dashboards, or ERM processes

Strong business analysis, facilitation, problem-solving, and ability to structure ambiguity across domains

Proven ability to build partnerships across Legal, Compliance, Privacy, Cyber Security, ERM, Data Offices, technology, and business functions

Excellent written and verbal communication with credibility to influence senior stakeholders

Collaboration, negotiation, and change leadership with an enablement mindset

Collaboration

Communication

Facilitation

Regulatory compliance

Data protection

AI governance

📌 Director, Data & AI Risk Management (Barcelona)
🏢 AstraZeneca
📍 Barcelona