Senior Data & AI Governance Specialist

Xero is trusted by millions of small businesses and their advisors around the world. As a Senior Data & AI Governance Specialist, you will help shape how Xero manages data as a strategic asset and governs AI responsibly. Reporting to the Director of Data & AI Governance, you will move well beyond traditional compliance to provide hands-on enablement services that bridge the gap between policy and practice. You will join the Data & AI Governance team, which sits within Xero's Legal function and works closely with Product, Privacy, Security, Regulatory, Risk, and Government Relations.

Responsibilities

Evolving Xero's privacy, data and AI governance frameworks to enable rapid, responsible data use and AI adoption and deployment across the business; Partnering with cross-functional teams to translate governance policies and requirements into practical, user-friendly guidance at scale and support their adoption; Delivering high-impact literacy programmes and tailored educational resources that uplift data and AI capability across Xero; Working with Regulatory, Privacy, and Risk functions to keep Xero ahead of evolving legislation and customer expectations in the data and AI space; Partnering with teams to co-design pragmatic data and AI governance approaches that address bias, transparency, and explainability; Advising decision-makers on where to set governance guardrails consistent with Xero's Responsible Data Use Commitments

Requirements

Deep knowledge of data governance frameworks and practices, including experience setting up stewardship models, governance forums, and supporting tooling such as data catalogues and data quality platforms; Recent hands-on experience in AI governance, with the ability to understand AI systems and navigate ethical, regulatory, and operational challenges of responsible AI at scale; Experience working with engineers and other technical experts, with technical depth in data architecture, quality and lineage, and hands-on experience bridging policy and technical implementation; Ability to translate complex regulatory and policy requirements into clear, actionable guidance for diverse audiences; Ability to explain governance concepts to technical SMEs and technical concepts to policy stakeholders; Ability to build trust quickly, communicate with clarity, and raise and work through difficult topics; Familiarity with regulations such as GDPR, the EU AI Act, and CCPA; Familiarity with certification frameworks such as ISO 27001/SOC2; A growth mindset and drive to Go Further

Benefits

Flexible and hybrid working arrangements; Boost days for in-person team connection and collaborative work