Data Protection and AI Governance Specialist

Your Team Responsibilities

The Data Protection and AI Governance Specialist sits within the Data Protection and Privacy Office and will support the Data Protection and AI Governance risk assessment programs, advise business functions on risk-based reviews, and recommend effective mitigation strategies to ensure compliance with MSCI requirements and applicable regulations. This role will play a key part in enabling secure and compliant data use in emerging technologies, including AI, and will act as a trusted advisor to stakeholders across the enterprise. The individual will be adept in leveraging tools like OneTrust, ServiceNow and Power BI to support effective execution, operational excellence, and visibility of our risk management activities.

This position requires strong technical acumen, a risk-based mindset, and practical knowledge of data governance in global enterprises, with a particular emphasis on data protection practices (beyond privacy) in support of AI governance initiatives.

Your Key Responsibilities

• Support the review of enterprise-wide information risk assessments, especially for AI and advanced data analytics use cases.
• Act as subject matter expert on data protection controls—focusing on access management, minimization, retention, and secure sharing.
• Develop and operationalise AI governance controls and frameworks to support ethical, accountable AI practices.
• Manage and enhance use of OneTrust for risk assessments, data mapping, and record of processing activities (RoPAs), and other associated inventories.
• Design and implement dashboards and risk reporting using Power BI to track key risk indicators (KRIs), compliance metrics, and data governance activities.
• Conduct and document Data Protection Risk Assessments (DPRAs) and AI Risk Assessments where required.
• Collaborate with legal, security, technology and data teams to apply technical safeguards and governance protocols across sensitive or regulated data workflows.
• Monitor evolving AI and data centric regulations (EU AI Act, GDPR, DORA, etc.) and support the implementation of applicable requirements at MSCI.
• Maintain accurate and comprehensive data inventories and classification models to inform protection strategies.
• Continuously monitor and update information asset management frameworks to reflect evolving business and regulatory needs.
• Support the delivery of training and awareness campaigns related to data protection controls and responsible data use.
• Ensure robust audit trails and evidence for regulatory or client assurance requests related to AI, risk, or data handling practices.
• Support the execution and coordination of relevant functions in delivery of a coherent Data Protection Strategy.

Effective data protection and governance programs will require the collaboration of many functions including Legal/Compliance, IT Security and IT Infrastructure, Development, Product Management and others. The candidate is expected to collaborate with all relevant functions to conduct risk assessments, deliver integrated guidance, and ensure compliance with MSCI requirements.

Your skills and experience that will help you excel

• 5+ years of relevant experience in information risk, data protection, privacy or IT security in complex global environments.
• Familiarity and hands-on experience with the EU AI Act, ISO 42001, NIST Artificial Intelligence Risk Management Framework.
• Knowledge of fairness, transparency, and explainability practices in AI/ML models.
• Experience with risk and compliance tooling especially OneTrust in a technical or administrative capacity.
• Proficiency in Power BI, Power Automate, and SharePoint including building custom dashboards for risk or data governance reporting.
• Experience with software supporting technology asset management (such as ServiceNow / OneTrust)
• Familiarity with AI governance, model risk management, or algorithmic accountability frameworks is highly preferred.
• Background in IT Infrastructure, cloud environments, or technical security implementations.
• Bachelor’s degree in a relevant field (e.g., Computer Science, Cybersecurity, Information Risk, or Engineering, Information Management).
• Certifications such as CISM, CISSP, CRISC, CGEIT, AIGP or equivalent are a strong plus.
• Experience in a multinational corporation. Experience in financial services is a plus.
• Excellent communications skills
• Strong work ethic, be a self-starter, very organized
• Strong MS Office skills for data analytics
• Experience with implementing significant change programs requiring coordination and communication of multiple functions.

While exposure to disciplines such as Legal/Compliance, Audit, and Consulting are helpful, we are looking for candidates who have strong technology backgrounds, with experience in IT Security and IT Infrastructure/DBA being especially relevant.

About MSCI

What we offer you

• Transparent compensation schemes and comprehensive employee benefits, tailored to your location, ensuring your financial security, health, and overall wellbeing.

• Flexible working arrangements, advanced technology, and collaborative workspaces.

• A culture of high performance and innovation where we experiment with new ideas and take responsibility for achieving results.

• A global network of talented colleagues, who inspire, support, and share their expertise to innovate and deliver for our clients.

• Global Orientation program to kickstart your journey, followed by access to our Learning@MSCI platform, LinkedIn Learning Pro and tailored learning opportunities for ongoing skills development.

• Multi-directional career paths that offer professional growth and development through new challenges, internal mobility and expanded roles.

• We actively nurture an environment that builds a sense of inclusion belonging and connection, including eight Employee Resource Groups. All Abilities, Asian Support Network, Black Leadership Network, Climate Action Network, Hola! MSCI, Pride & Allies, Women in Tech, and Women’s Leadership Forum.

At MSCI we are passionate about what we do, and we are inspired by our purpose – to power better investment decisions. You’ll be part of an industry-leading network of creative, curious, and entrepreneurial pioneers. This is a space where you can challenge yourself, set new standards and perform beyond expectations for yourself, our clients, and our industry.

MSCI is a leading provider of critical decision support tools and services for the global investment community. With over 50 years of expertise in research, data, and technology, we power better investment decisions by enabling clients to understand and analyze key drivers of risk and return and confidently build more effective portfolios. We create industry-leading research-enhanced solutions that clients use to gain insight into and improve transparency across the investment process.

MSCI Inc. is an equal opportunity employer. It is the policy of the firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, gender, gender identity, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy (including unlawful discrimination on the basis of a legally protected parental leave), veteran status, or any other characteristic protected by law. MSCI is also committed to working with and providing reasonable accommodations to individuals with disabilities. If you are an individual with a disability and would like to request a reasonable accommodation for any part of the application process, please email Disability.Assistance@msci.com and indicate the specifics of the assistance needed. Please note, this e-mail is intended only for individuals who are requesting a reasonable workplace accommodation; it is not intended for other inquiries.

To all recruitment agencies

MSCI does not accept unsolicited CVs/Resumes. Please do not forward CVs/Resumes to any MSCI employee, location, or website. MSCI is not responsible for any fees related to unsolicited CVs/Resumes.

Note on recruitment scams

We are aware of recruitment scams where fraudsters impersonating MSCI personnel may try and elicit personal information from job seekers. Read our full note on careers.msci.com