Senior Data & AI Governance Specialist

Xero is trusted by millions of small businesses and their advisors worldwide. As Senior Data & AI Governance Specialist, you will help shape how Xero manages data as a strategic asset and governs AI responsibly. Reporting to the Director of Data & AI Governance, you will provide hands-on enablement services that bridge the gap between policy and practice. You will join the Data & AI Governance team within Xero's Legal function, working closely with Product, Privacy, Security, Regulatory, Risk, and Government Relations.

Responsibilities

Evolve Xero's privacy, data and AI governance frameworks to enable rapid, responsible data use and AI adoption and deployment across the business; Partner with cross-functional teams to translate governance policies and requirements into practical, user-friendly guidance at scale and support their adoption; Deliver high-impact literacy programmes and tailored educational resources that uplift data and AI capability across Xero; Work with Regulatory, Privacy, and Risk functions to keep Xero ahead of evolving legislation and customer expectations in the data and AI space; Co-design pragmatic data and AI governance approaches that address challenges such as bias, transparency, and explainability; Advise decision-makers on where to set governance guardrails so Xero teams can experiment and build safely, consistent with the Responsible Data Use Commitments

Requirements

Deep knowledge of data governance frameworks and practices, including experience setting up stewardship models, governance forums, and supporting tooling such as data catalogues and data quality platforms; Recent hands-on experience in AI governance, with the ability to understand AI systems and navigate the ethical, regulatory, and operational challenges of responsible AI at scale; Experience working with engineers and other technical experts, with technical depth in data architecture, quality and lineage, and hands-on experience bridging policy and technical implementation; Ability to translate complex regulatory and policy requirements into clear, actionable guidance for diverse audiences and explain governance and technical concepts to different stakeholders; Someone who builds trust quickly, communicates with clarity, and has the courage to raise and work through difficult topics; A growth mindset and drive to automate, improve, and share learning with others

Nice to have

Familiarity with regulations such as GDPR, the EU AI Act, and CCPA; Familiarity with certification frameworks such as ISO 27001/SOC2

Benefits

Flexible and hybrid working arrangements; Boost days for in-person team connection and collaborative work