Head of Data Protection and AI Governance (Hiring Immediately)

We’re Civica and we make software that helps deliver critical services for citizens all around the world. From local to state government, to education, to health and care, over 5,000 public bodies across the globe use our software to help provide critical services to over 100 million citizens.

Our aspiration is to be a GovTech champion everywhere we work around the globe, supporting the needs of citizens and those that serve them every day. Building on 21 years of continuous growth and success, we're at a pivotal point on our journey to realise that aspiration.

Why you will love this opportunity as Head of Data Protection and AI Governance at Civica

Our Compliance & Integrity function sits at the heart of how we operate ensuring that as we innovate, we do so responsibly, lawfully, and with the full confidence of our customers, partners, and regulators.

As we continue to grow and deepen our use of artificial intelligence across our products and services, we are looking for an exceptional individual to lead our Data Protection & AI Governance function shaping how Civica manages data and AI not just compliantly, but with integrity and ambition.

Reporting to and partnering closely with the Group Compliance Officer & DPO, the Head of DP & AI Governance will set the strategic direction for responsible data and AI use across the enterprise. You will own the frameworks, policies, and operational programmes that underpin Civica's approach to privacy and AI governance, and provide senior leadership and expert assurance to the wider business.

This is a exciting and significant leadership role that is both a strategic and hands-on role. You will shape the vision and build the capability while remaining close enough to operations to ensure your frameworks are embedded, effective, and future-ready.

What you will do to be successful in this role:

• Lead, develop, and mentor the DP & AI Governance team building a high-performing function that is capable of operating at pace in a complex, regulated environment.

• You will help define and own Civica's enterprise-wide DP & AI governance framework, ensuring it remains aligned to the evolving regulatory landscape, business strategy, and industry expectations.

•  Working closely with teams across Civica, you will embed governance across the product and AI lifecycle making compliance an enabler of innovation rather than a barrier to it.

•  You will design and own the AI Governance & DP operations roadmap, including policies, standards, role-based training, privacy tooling, and an ISO 27701-aligned Privacy Information Management System.

•  You will lead end-to-end privacy operations — from RoPA, DPIAs, and LIAs to DSARs, incidents, cross-border transfer programmes, and supplier assurance — with clear SLAs, dashboards, and oversight structures in place.

•  At a senior level, you will act as the expert reviewer for high-risk processing activities and complex privacy decisions, provide escalation support across incidents and supplier risks, and coordinate privacy and AI integration planning for M&A activity.

•  You will also provide transparent, confident assurance to the Group Compliance Officer / DPO and senior leadership on DP and AI risks, regulatory developments, and the maturity of Civica's governance posture.

Requirements

• Deep experience building and scaling privacy and AI governance programmes, including operating a Privacy Information Management System (PIMS), managing RoPA, cross-border transfers, supplier assurance, and lifecycle governance, underpinned by strong metrics, dashboards, and stakeholder leadership.

• Strong applied knowledge of UK and international privacy and AI regulation, including GDPR, DPA 2018, PECR, ISO 27701, the EU AI Act, and ethical AI principles — with the ability to translate regulatory requirements into practical, business-facing frameworks.

• Proven capability in governance design, with the confidence and credibility to influence senior stakeholders and drive meaningful change across a complex, matrixed organisation.

• A strategic thinker with a future-focused mindset — innovative, comfortable operating in ambiguity, and able to anticipate regulatory and business change before it lands.

• Demonstrated experience leading and developing high-performing teams of data protection and AI governance professionals, with a collaborative and empowering leadership style.

• Hands-on experience of AI risk management across the full AI lifecycle, including use-case triage, impact/risk assessment, fairness and bias testing, human oversight contr]]>