Governance Enablement Specialist

Recruiter: Sowmya Reddy

Hiring Manager: Jaidev Venkatesan

Career Grade: D

Internal Closing Date: 12th August, 2026

About the role

Our Data and AI vision is to reinvent BT Group as the market leader in AI-powered connectivity, solutions and services, helping businesses, public sector communities and society improve the way they live and work. We’ll do this by building foundations to strengthen our core platform, while keeping ethics and responsible delivery at the core and, by harnessing data and AI to reinvent BT Group, solve business and customer problems and drive value through innovation. Underpinning the success of the strategy are our people, using our collective expertise in Data and AI to partner with the organization and drive a data-led culture.

What you’ll be doing

• Own and maintain the RAG (Retrieval-Augmented Generation) knowledge base: curate policy documents, guidance, triage playbooks, retention schedules, and regulatory references that feed the AI platform, keeping sources current as BT standards evolve.
• Author and maintain structured governance content: platform governance rules (auto-approve / SIA required / blocked), risk escalation patterns, approval logic, and decision frameworks; maintain the sources-of-truth register (50+ internal systems, regulatory sources, supplier data).
• Define and maintain the interview logic — the structured rules that determine what questions the AI asks, in what order, and what constitutes a complete assessment.
• Own risk scoring frameworks: data risk scores (by data type, geography, volume, data subjects), supplier risk tiers, and platform risk classifications (Tier 0–3).
• Codify requirements from specialist teams into machine-executable rules — Privacy Legal (lawful bases, international transfer triggers, DPIA thresholds), Secure by Design (triage playbook rules, classification, red lines), Enterprise Architecture (TSA scoping, NIS2 applicability, CIA ratings), and Data Protection (retention categories, classification levels, contractual clauses).
• Review AI-generated assessments for accuracy, completeness, and compliance; identify hallucination patterns, over/under-estimation of risk, and missing regulatory considerations; maintain regression test cases.
• Provide feedback loops to engineering — specify where prompts need refinement, where retrieval returns wrong sources, and where logic gaps exist.
• Engage with Privacy Legal, Secure by Design, Procurement, and Enterprise Architecture teams to gather requirements and translate complex regulatory and policy requirements (TSA Code of Practice, GDPR Article 35, ICO guidance, BT AI Playbook) into structured formats the platform can consume; maintain RACI mappings.
• Manage platform governance and configuration: tool auto-approve / SIA / blocked status, persona settings, supplier/acronym mappings, interview strategy parameters, and the governance configuration (structured JSON/rules files) that controls AI behaviour; specify requirements for new data-source connectors (EDR Hub, OneTrust, Trust Your Supplier, CGP, Artemis, procurement systems).

Desirable Skills / Experience

Functional Knowledge & Technical Skills:

• Deep understanding of data governance frameworks (GDPR, UK DPA 2018, Data Use & Access Act) and how they apply to real-world technology decisions.
• Practical knowledge of AI governance: risk classification, responsible AI principles, transparency requirements, and human-oversight expectations.
• Familiarity with BT’s governance ecosystem (SIA process, CGP, data classification, retention schedules, PIAs) and security governance (Secure by Design, triage/risk tiering, supplier security assessment, TSA/NIS2 applicability).
• Ability to write, test, and iterate on AI prompts and system instructions, work with RAG knowledge bases (chunking, retrieval quality, source curation), and define decision logic in structured formats (JSON rules, decision trees, scoring matrices).
• Hands-on comfort with AI admin interfaces, configuration files, and governance platforms — able to make routine changes directly without engineering support.

Business Expertise:

• Ability to assess whether AI-generated text is accurate, complete, and compliant — combining deep domain knowledge with critical evaluation.
• Structured thinking: can decompose complex regulatory requirements into discrete, testable rules.
• Evidence-based approach: validates changes with test cases, tracks outcomes, and iterates based on data.

Leadership & Interpersonal Skills:

• Can engage credibly with Privacy Legal, Security, Architecture, and Procurement specialists — speaks their language.
• Translates between governance requirements and technical implementation — not as a project manager, but as someone who understands both sides.
• Clear technical writing: creates structured governance content precise enough for AI consumption and clear enough for human review.

Experience required for the role

Experience you’d be expected to have:

• 6+ years in data governance, privacy, AI governance, or risk/compliance roles within complex enterprise environments (telecoms or regulated industry strongly preferred).
• Demonstrable experience defining governance rules, risk frameworks, or decision logic that has been operationalised (not just documented).
• Hands-on experience with AI/LLM tools in a governance or compliance context: prompt configuration, knowledge-base management, output validation, or AI-assisted workflow design.
• Track record of working across multiple specialist teams (legal, security, architecture, procurement) to codify requirements into usable, structured formats.
• Experience with data governance tooling (OneTrust, data catalogues, impact-assessment platforms, or similar) at a configuration / power-user level.
• Understanding of RAG concepts, AI risk, and responsible AI principles from an operational “how do we deploy this safely” perspective.
• Comfortable working in structured data formats (JSON, CSV, spreadsheets with logic) and validating AI outputs against regulatory standards.
• Desirable: BT experience (CGP, SIA process, EDR Hub, BT AI Playbook); exposure to the UK AI regulatory landscape (ICO guidance, DSIT principles, DRCF, TSA); Microsoft 365 governance (SharePoint, Copilot Studio admin, Entra) or AWS governance tooling; IAPP certification (CIPP/E, CIPM) or equivalent; experience contributing to ISO 42001 or NIST AI RMF implementation

BT Group is the UK’s leading communications group and the holding company behind some of the country’s most recognised brands – including BT, EE, Openreach and Plusnet. Our purpose is as simple as it is ambitious: we connect for good. Our customers include consumers, small, medium and large businesses, public sector organisations and other communications providers.

BT Group’s role is about setting direction, unlocking value and creating the conditions for our brands and businesses to thrive.

Having come through the most capital-intensive phase of our fibre investment, our focus now is on what comes next – simplifying how we operate, using technology and AI to work smarter, and organising ourselves to serve customers better and grow sustainably. Group teams shape strategy, policy, brand, capital allocation and transformation, helping the whole organisation perform at its best.

We have a singular culture that unites all our people: we are customer-first challengers, who are committed, clear and connected. These behaviours unite us as one team to deliver for our colleagues, our customers, our stakeholders and the country. Joining BT Group means working at the heart of a business that matters to the UK, with the opportunity to shape decisions, influence outcomes and help set the future course of one of the country’s most important companies.