Location:
Remote Barcelona, Spain (preference is Spain)Work Schedule: 40 hours/weekOxford's client is seeking an AI Governance & Risk Assessment Business Analyst with 3–5 years of experience to support Privacy Impact Assessments (PIAs) and AI Risk Assessments across enterprise AI and data initiatives. This individual will work closely with R&D;, Legal, Compliance, IT, and AI/Data Science teams to identify and evaluate risks related to AI use cases, patient data privacy, and regulatory compliance. Responsibilities include reviewing assessments, recommending risk mitigation strategies, documenting findings, and collaborating with stakeholders to track and close out identified risks. The idóneo candidate will have hands-on assessment experience within a pharmaceutical or biotechnology environment and be able to contribute with minimal onboarding.
Musts:3–5 years of experience in AI governance, privacy, compliance, risk assessment, or a related fieldPharmaceutical or biotechnology experience,



preferably supporting R&D; initiativesHands-on experience reviewing Privacy Impact Assessments (PIAs) and AI Risk AssessmentsExperience evaluating AI use cases, identifying risks, and recommending mitigation strategiesUnderstanding of patient data privacy, patient rights, and regulatory complianceFamiliarity with GDPR, NIST AI Risk Management Framework, or similar governance standardsExperience collaborating with R&D;, Legal, Compliance, and technical stakeholders to track and resolve identified risksStrong documentation, analytical, and communication skillsPluses:Experience supporting AI/ML initiatives within pharmaceutical R&DFamiliarity; with Generative AI, LLMs, and responsible AI practicesExperience working with sensitive patient or clinical research dataKnowledge of ISO/IEC 42001 and other AI governance frameworksExperience with enterprise AI governance programs and risk management processes

📌 Business Analyst (Barcelona)
🏢 Oxford Global Resources
📍 Barcelona