Senior Consultant AI Act & GDPR Compliance

Project overview

Context

Our client is looking for a senior consultant specialized in regulatory compliance for the implementation of their AI Act (RIA) compliance program and the execution of their GDPR compliance plan.

Missions

The mission covers two complementary aspects:

Part 1 — AI Act (RIA) Compliance

Part 2 — GDPR Compliance

Expected Deliverables

Tools & Environment

Working Conditions

• Develop a compliance strategy adapted to the group's context and define an operational roadmap
• Establish and maintain the register of Artificial Intelligence Systems (AIS)
• Identify and prioritize high-risk AI systems according to RIA criteria
• Support the relevant departments in making their AI projects compliant: assessment, implementation of required measures, monitoring
• Ensure the articulation of the RIA with other regulations (GDPR, audiovisual law, etc.)
• Analyze contracts of AI system providers within the defined scope
• Draft compliance documentation (procedures, policies, roles & responsibilities)
• Implement monitoring indicators and audits (annual reports...)
• Raise awareness among business and technical teams about RIA requirements
• Ensure GDPR compliance for several group departments, following the methods and procedures defined by the DPO
• Monitor data processing, assess their compliance, and support necessary evolutions
• Draft DPIAs (Data Protection Impact Assessments):
• Collect and centralize information
• Facilitate working meetings with stakeholders
• Monitor the drafting and implementation of recommendations
• Support the deployment of the Dastra software tool to the relevant internal audiences
• Draft legal memos, analyses, and concise presentations on topics within their scope
• Participate in supporting procurement projects involving personal data
• Populate and update the AIS register (RIA compliance)
• Populate and update the processing register (GDPR compliance)
• Compliance analyses and remediation requests drafted in the Dastra tool
• Meeting minutes and associated documentation
• GDPR
• AI Act (RIA)
• Dastra software
• Mission location: Paris
• Long-term mission
• 2 days of remote work per week
• Start date: ASAP
• Professional English mandatory
• Seniority required: minimum 7 years of experience

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Languages: French