Business analyst in AI governance

Oxford's client is seeking an AI Governance & Risk Assessment Business Analyst with 3–5 years of experience to support Privacy Impact Assessments (PIAs) and AI Risk Assessments across enterprise AI and data initiatives. This individual will work closely with R&D, Legal, Compliance, IT, and AI/Data Science teams to identify and evaluate risks related to AI use cases, patient data privacy, and regulatory compliance.

• reviewing assessments
• recommending risk mitigation strategies
• documenting findings
• collaborating with stakeholders to track and close out identified risks

• 3–5 years of experience in AI governance, privacy, compliance, risk assessment, or a related field
• Pharmaceutical or biotechnology experience, preferably supporting R&D initiatives
• Hands-on experience reviewing Privacy Impact Assessments (PIAs) and AI Risk Assessments
• Experience evaluating AI use cases, identifying risks, and recommending mitigation strategies
• Understanding of patient data privacy, patient rights, and regulatory compliance
• Familiarity with GDPR, NIST AI Risk Management Framework, or similar governance standards
• Experience collaborating with R&D, Legal, Compliance, and technical stakeholders to track and resolve identified risks
• Strong documentation, analytical, and communication skills
• Будет плюсом: Experience supporting AI/ML initiatives within pharmaceutical R&D; Familiarity with Generative AI, LLMs, and responsible AI practices; Experience working with sensitive patient or clinical research data; Knowledge of ISO/IEC 42001 and other AI governance frameworks; Experience with enterprise AI governance programs and risk management processes

• Start Date: 23rd or 30th November
• Duration: 3 months + ext.
• Location: Remote Barcelona, Spain (preference is Spain)
• Work Schedule: 40 hours/week