Data Protection & AI Governance Consultant (Hiring Immediately)

Data Protection & AI Governance Consultant
Location: Remote

Worldwide Events Group

Worldwide Events Group, founded in 2004, is a recognised leader in global MICE and luxury travel. Across our portfolio, we bring people together and facilitate meaningful relationships through H2H, human-to-human connection.
Innovation is central to our evolution, and we're embracing AI to elevate personalisation, streamline event design and create smarter, more intuitive experiences for our global communities.
Our work is delivered through two industry-leading brands, M&I and Private Luxury Events, connecting communities through extraordinary events and experiences across Europe, the Middle East and the Americas.

The Engagement

We're looking for an experienced Data Protection & AI Governance Consultant to independently review our current approach and help us establish practical, proportionate governance for a global business.
We need someone who is an expert in their field, but just as importantly, someone who can make that expertise accessible. You'll help us understand what good looks like, where we need to improve and how we make data protection and AI governance straightforward for the people using it every day.
This isn't about creating governance for governance's sake. We want clear, practical guardrails that allow our teams to use data, technology and AI confidently and responsibly, including Microsoft 365, Copilot, third-party AI tools and internally developed AI agents.
As a business operating globally, we also need someone who understands the realities of data protection in an international organisation and can translate those considerations into sensible, workable practices.
You'll work with stakeholders across the COO Office & Transformation, IT, HR and our AI implementation activity, providing independent expertise while making complex regulatory and technical requirements relatable and practical.

Scope of Services & Deliverables

This engagement includes:

• Conducting an independent current-state assessment of our data protection and AI governance arrangements, identifying immediate and priority gaps.
• Completing a full gap assessment and prioritised remediation plan, clearly distinguishing legal requirements, regulatory good practice and proportionate organisational controls.
• Reviewing our existing policies, procedures, privacy documentation, tools register, AI assessment and DPIA approach, simplifying and strengthening these where appropriate.
• Reviewing how data protection and AI governance work in practice across the business, identifying unnecessary complexity and making processes easier for people to understand and follow.
• Establishing a practical AI and technology governance process covering third-party technology and AI tools, Microsoft 365 and Copilot, integrations and internally developed AI agents.
• Creating clear and proportionate approaches to assessment, approval, documentation and escalation, giving teams straightforward guardrails for everyday decision-making.
• Providing an independent conclusion on whether a formal DPO is legally required, alongside recommendations for our ongoing data protection governance model and the appropriate level of specialist support.
• Testing the resulting governance approach against real-world use cases to ensure it is practical and workable for the business.

Requirements

This engagement is best suited to an experienced Data Protection & AI Governance Consultant who can provide independent expert leadership while making a complex subject practical, relatable and easy for people across the business to apply.
The successful consultant will bring:

• A relevant professional data protection/privacy qualification, supported by substantial practical experience.
• Expertise in data protection and privacy governance, with the confidence to independently assess where we are, identify what really matters and recommend a clear and proportionate way forward.
• Experience working with businesses that operate globally, with a practical understanding of the data protection considerations that come with handling data, working with suppliers and operating internationally.
• Practical expertise in Microsoft 365 and Copilot, including the data protection, privacy and AI governance considerations associated with their use within an organisation.
• Expertise in AI governance, including generative AI, third-party AI tools, enterprise integrations and internally developed AI agents.
• Proven experience reviewing how things work in practice, not simply whether policies and documents exist, and turning findings into straightforward processes and guidance that people can actually use.
• An ability to make data protection and AI governance relatable, translating technically or legally comp]]>