AI Data Protection, Risk & Compliance Specialist

If you’re looking for a role where you can make AI systems trustworthy, embed privacy into cutting-edge technologies, and ensure organizations scale AI responsibly — keep reading.

Who we are

NoeXa is a tech consultancy company focused on innovation and excellence, part of the Austrian group XRXES — whose name stands for “Success.”

Based in Lisbon, we are the group’s technology competence center, leading digital transformation initiatives across industries. We partner with public and private organizations, combining data, AI, and engineering expertise to solve complex challenges and generate real, measurable impact.

As organizations accelerate AI adoption, we ensure these systems are designed and operated with privacy, compliance, and trust at their core.

Position: AI Data Protection, Risk & Compliance Specialist

Work model: 1 day per week transitioning to 1 day/month at the office (Lisbon, Portugal)

Your role

• Embed privacy-by-design and by-default principles into AI systems, models, and agent-based architectures
• Translate regulations (GDPR, EU AI Act) and internal policies into practical technical controls and guidelines
• Conduct privacy risk assessments (DPIAs, AI risk analysis) for AI use cases and data flows
• Identify and mitigate risks related to personal data processing in AI, including model behavior and system design
• Create and maintain structured documentation (data flows, controls, design decisions, compliance evidence)
• Partner with AI engineers, data teams, and security to ensure scalable, compliant implementations
• Support the design of technical safeguards (data minimization, anonymization, access controls, retention policies)
• Act as a bridge between technical teams and data protection/legal functions
• Enable governance by ensuring systems are auditable, transparent, and compliant
• Support handling of data subject requests and AI-related data incidents
• Communicate privacy risks and requirements clearly to both technical and non-technical stakeholders

What we value in you

• Degree in Computer Science, Engineering, Data Science, Law, or a related field
• 5+ years of experience in data protection, AI, or technology roles
• Strong knowledge of GDPR and core data protection principles
• Solid understanding of modern AI systems (LLMs, APIs, data pipelines, cloud environments)
• Experience performing DPIAs and managing data protection risks at scale
• Ability to translate legal and regulatory requirements into technical implementations
• Strong analytical mindset and attention to detail
• Excellent communication and stakeholder management skills
• Fluent in English

What sets you apart

• Experience with AI governance, Responsible AI, or model risk frameworks
• Knowledge of the EU AI Act and emerging AI regulations
• Exposure to cloud platforms (e.g., GCP, Azure)
• Hands-on experience with AI tools or platforms (e.g., OpenAI, Azure AI, etc.)
• Certifications in privacy or compliance (e.g., IAPP)
• Experience in international or multi-country environments
• Ability to challenge and influence technical design decisions
• Proactive mindset, critical thinking, and strong ownership

What we offer

• Integration into a fast-growing company with strong international presence
• High-impact projects at the intersection of AI, privacy, and digital transformation
• Exposure to cutting-edge AI technologies and real-world implementations
• A flexible hybrid model
• Continuous learning and a tailored development plan
• Competitive compensation and career progression opportunities

The next step is yours

At NoeXa, we don’t just build AI — we make it responsible, compliant, and trustworthy by design.

If you’re passionate about AI, privacy, and shaping how organizations adopt AI safely at scale, we’d love to meet you.

Send us your CV and help us build responsible AI systems for the future.