Senior Data & AI Governance Specialist

Xero is trusted by millions of small businesses and their advisors around the world. As a Senior Data & AI Governance Specialist, you will help shape how we manage data as a strategic asset and govern AI responsibly. Reporting to the Director of Data & AI Governance, you will move well beyond traditional compliance to provide hands-on enablement services that bridge the gap between policy and practice. You will join the Data & AI Governance team, which sits within Xero's Legal function and works closely with Product, Privacy, Security, Regulatory, Risk, and Government Relations.

Responsibilities

Evolve Xero's privacy, data and AI governance frameworks to enable rapid, responsible data use and AI adoption and deployment across the business; Partner with cross-functional teams to translate governance policies and requirements into practical, user-friendly guidance at scale and support their adoption; Deliver high-impact literacy programmes and tailored educational resources that uplift data and AI capability across Xero; Work with Regulatory, Privacy, and Risk functions to keep Xero ahead of evolving legislation and customer expectations in the data and AI space; Partner with teams to co-design pragmatic data and AI governance approaches that address bias, transparency, and explainability; Advise decision-makers on where to set governance guardrails so Xero teams can experiment and build safely, consistent with the Responsible Data Use Commitments

Requirements

Deep knowledge of data governance frameworks and practices, including experience setting up stewardship models, governance forums, and supporting tooling such as data catalogues and data quality platforms; Recent hands-on experience in AI governance, with the ability to understand AI systems and navigate the ethical, regulatory, and operational challenges of responsible AI at scale; Experience working with engineers and other technical experts, with technical depth in data architecture, quality and lineage, and hands-on experience bridging policy and technical implementation; Ability to translate complex regulatory and policy requirements into clear, actionable guidance for diverse audiences; Ability to explain governance concepts to technical SMEs and technical concepts to policy stakeholders; Builds trust quickly, communicates with clarity, and has the courage to raise and work through difficult topics; A growth mindset and drive to automate, improve, and share what you learn

Nice to have

Familiarity with regulations such as GDPR, the EU AI Act, and CCPA; Familiarity with certification frameworks such as ISO 27001/SOC2

Benefits

Flexible and hybrid working arrangements; Boost days for in-person team connection and collaborative work