Privacy & AI Governance Specialist

About the role

Quorum Software, a rapidly growing company and industry leader in oil and gas transformation, is looking for a Privacy & AI Governance Specialist to join its Information Security, Privacy & Compliance team. The role reports to the Data Protection Officer and supports the maturity of Quorum's global privacy, data protection and AI governance programmes while helping the business meet evolving regulatory requirements across many jurisdictions. The position is based in Trondheim or Stavanger, Norway.

Key responsibilities

• Support the design, implementation and continuous improvement of global privacy, data protection and AI governance programmes.
• Maintain privacy documentation such as policies, procedures, templates, playbooks, RoPA, data maps and DPIA/PIA materials.
• Advise stakeholders on privacy, data protection, vendor reviews, data subject rights, cross-border transfers, AI use cases and privacy-by-design.
• Carry out and support DPIAs, PIAs, TIAs, AI risk assessments and privacy reviews.
• Review customer and vendor agreements, including DPAs, SCCs, security schedules and AI/data use clauses.
• Support vendor management, customer audits, pre-sales security questionnaires, compliance reporting, privacy incidents and breach response.
• Maintain inventories of data processing activities, vendors, AI tools, data flows and risk assessments.
• Monitor global privacy, cybersecurity and AI regulation and turn requirements into policies and processes.
• Deliver privacy, AI governance and information security training and awareness.
• Help identify and remediate compliance gaps and risks.

Required profile

• Bachelor's degree or equivalent experience in law, information governance, information security, compliance, risk management, business or technology.
• 3+ years of experience in privacy, data protection, compliance, information governance, legal operations, security risk or a related discipline.
• Experience with DPIAs/PIAs, RoPA, data mapping, vendor privacy reviews, privacy-by-design and incident response.
• Interest in process improvement, workflow automation, GRC tools and scalable compliance operations.

Required skills

• Working knowledge of GDPR, UK GDPR, CCPA/CPRA and other global privacy regulations.
• Vendor management, risk management, customer audits, compliance reporting and contract review (DPAs, SCCs).
• Preferred: familiarity with GRC, privacy or compliance platforms such as OneTrust.
• Strong analytical, research, documentation, communication and stakeholder management skills.