• Help teams determine what we can do with data, under what conditions, and with what safeguards.
• Establish a consistent approach for assessing new and changing data use cases, considering factors such as:
  • Why the data was originally obtained
  • Client and contractual restrictions
  • Data sensitivity and classification
  • The proposed use and intended recipients
  • Security and access controls
  • Retention requirements
  • Legal, client, and reputational considerations
• For AI use cases, help define which activities are permitted, restricted, require additional review, or are prohibited. This will include the use of prompts, uploaded files, and connected data sources, as well as expectations around human oversight, output validation, and accountability.

Govern products, platforms, and technology

• Define the conditions under which client data can be stored or processed using Efficio products, SaaS platforms, cloud services, and AI tools.
• Work closely with Technology, Information Security, Legal, and Privacy teams to assess areas including:
  • Data residency and international transfers
  • Encryption, access controls, and logging
  • Supplier and subcontractor access
  • Data retention, backups, and deletion
  • Exit and data-export arrangements
  • Use of customer data for AI model training, product improvement, or other secondary purposes
• Help ensure that unapproved platforms are not used for client data without appropriate assessment and documented approval.

Support new solutions and innovation

• Work alongside teams designing and deploying new data, software, analytics, and AI solutions, providing governance input from an early stage.
• Ahead of launch, help confirm that the appropriate governance, legal, privacy, and security reviews have taken place and that material risks have been appropriately addressed.
• Where issues remain, recommend practical remediation, escalation, or, where necessary, a delay to rollout. Acceptance of significant residual risk will remain with the appropriate executive or governance committee.

Build governance that works in practice

• Help develop:
  • A clear data governance operating model and decision-rights framework
  • Practical data, AI, security, reuse, and retention policies
  • Data and AI use-case assessment processes
  • Risk-classification and escalation models
  • Policy exception processes and decision registers
  • Product and AI platform assessment standards
  • Solution launch-readiness checklists
  • Training, guidance, and supporting materials
  • Governance reporting for senior leadership and relevant committees
• Coordinate, advise, and constructively challenge stakeholders across the organisation while recognising that responsibility for managing data risk is shared across business owners, data owners, Legal and Privacy, Information Security, Technology, and senior governance forums.

Client engagement

This will also be an important client-facing role.

• Participate in client discussions where required, confidently explaining Efficio's approach to data governance, security, and responsible data use.
• Be comfortable responding to questions about how client data is accessed, used, stored, shared, retained, and protected, translating technical or governance concepts into clear, credible explanations for different audiences.

What we're looking for

We are looking for someone with experience across one or more of the following areas:

• Data governance or data management
• Data privacy
• Information security
• Technology or operational risk
• AI governance or responsible AI

You will also bring a practical understanding of modern technology environments, including SaaS, cloud, analytics, and AI platforms.

In particular, you will be able to:

• Translate complex regulatory, contractual, and security requirements into practical business guidance
• Apply proportionate, risk-based judgement rather than relying on a purely rules-based approach
• Influence and challenge senior stakeholders constructively
• Work effectively across Technology, Security, Legal, Privacy, and business teams
• Balance commercial objectives and innovation with appropriate governance
• Communicate confidently with clients and senior internal stakeholders
• Build processes and frameworks that are robust without creating unnecessary bureaucracy
• Navigate emerging areas where the answer may not always be immediately clear

What success looks like

Success in this role will mean that teams understand how to use data appropriately rather than simply being told what they cannot do.

We will look at measures including adoption of priority policies, review turnaround times, reduction in unapproved tool usage, effective management of exceptions, quality of governance reporting, stakeholder feedback, and a reduction in recurring governance issues.

Ultimately, the role will be judged on its ability to achieve both sides of our data ambition: protecting our clients and Efficio while enabling appropriate, secure, and innovative use of data and AI.