Data and artificial intelligence are central to Heathrow’s future. We are looking for a Data & AI Governance Lead to help shape and deliver our data and AI governance approach, ensuring data is managed responsibly, governance arrangements are effective, and decision-making is supported by robust controls and oversight across the airport.
In this role, you will lead governance reviews, assess the effectiveness of policies and controls, and provide expert guidance to stakeholders across Data, Technology, Cyber Security, Legal, Procurement and Data Protection. You will turn evidence into clear findings, practical recommendations and tangible improvements, helping Heathrow maximise the value of its data and AI investments.
This is an opportunity to play a key role in Heathrow’s ambition to become one of the world’s most digitally, data and artificial intelligence advanced airports.
- Delivering critical Data & AI governance capabilities (people, process and technology solutions) and controls in partnership with key stakeholders including Enterprise Risk Management, Data Protection, Cyber Security, Legal, Procurement and Security Intelligence.
- Leading governance reviews of Data & AI platforms and products to identify opportunities to improve governance, data quality, accountability and responsible use, while influencing stakeholders to implement improvements.
- Driving the successful adoption of Data & AI governance policies, standards, guidance and operating procedures, from development through to implementation, monitoring and continuous improvement.
- Assessing AI use cases and technology initiatives to help ensure they are deployed responsibly and in line with regulatory, ethical and organisational requirements.
- Leading governance-related change activities, including stakeholder engagement, communications, awareness and adoption of governance controls across multiple business areas.
- Leading on demonstrating and communicating the value of Data & AI governance to the business, articulating the financial and operational benefits of governance activities beyond compliance and influencing investment and prioritisation decisions.
- Lead governance and controls reviews: Apply experience from data and AI management, governance, risk, compliance or assurance to evaluate how controls operate within a complex organisation, providing clear direction on risks, recommendations and improvement actions.
- Drive policy and standards implementation: Lead or contribute to the development, maintenance and implementation of policies, standards, procedures and guidance, working with stakeholders to embed new processes, controls, technologies and ways of working.
- Work across different specialisms: Collaborate effectively with technical and non-technical stakeholders and communicate complex governance concepts, risks and recommendations in clear, accessible language.
- Understand modern data environments: Demonstrate knowledge of cloud-based data platforms, governance tooling, data management practices and AI governance methodologies.
- Understand regulatory and governance requirements: Demonstrate awareness of regulations and frameworks such as UK GDPR, the Data Protection Act 2018, NIS2, ISO 27001, ISO/IEC 42001 and emerging AI governance requirements, including the EU AI Act and NIST AI Risk Management Framework.
- Influence senior stakeholders and lead through change: Demonstrate experience building credibility with senior stakeholders, managing competing priorities and leading cross-functional initiatives to deliver governance outcomes across complex organisational environments.
Provide leadership and direction: Support the development of governance capability by coaching colleagues, sharing best practice and helping teams adopt consistent standards and approaches.
Desirable experience
It would be helpful, but is not essential, if you have:
- Experience in aviation, transport, critical national infrastructure or another regulated environment.
- Experience supporting or leading a data governance, information governance, cyber governance, AI governance, compliance or assurance capability.
- Knowledge of responsible AI, AI risk management, data lineage, metadata management, data quality or master data management.
- Familiarity with governance frameworks such as DAMA-DMBOK, NIST AI Risk Management Framework, COBIT, ISO 27001 or ISO/IEC 42001.
- Experience using Data & AI governance or compliance tools.
Professional qualifications (desirable)
One or more of the following would be advantageous:
- DAMA Certified Data Management Professional (CDMP).
- IAPP CIPP/E or CIPM.
- ISO 27001 and/or ISO/IEC 42001 Foundation or Practitioner certification.
- Certified Information Systems Auditor (CISA).
- Certified in Risk and Information Systems Control (CRISC).