At Efficio, we're not just a consulting firm; we're a team of dedicated experts committed to transforming procurement and supply chain functions. Our mission is to drive sustainable, measurable value for our clients through innovative solutions and deep industry insights. Join us and be part of a dynamic environment where your skills and ideas make a real impact.
Help shape how Efficio uses data responsibly, securely and effectively.
We are looking for a Data Enablement Officer to establish and lead Efficio’s data governance framework, helping us protect client data while enabling its responsible use across our services, analytics, products and AI capabilities.
This is a highly visible role at the intersection of data, technology, AI, risk and client delivery. You will work across the business to turn complex contractual, regulatory, privacy and security requirements into practical guidance that enables teams to innovate with confidence.
Initially, the role will have a strong advisory and enablement focus: helping teams understand client requirements, assess new uses of data and make proportionate, risk-based decisions. As our governance model matures, the role is expected to take greater ownership of the framework and delegated authority for lower-risk decisions.
You will assess our current data-handling practices and develop a practical, scalable governance framework covering the lifecycle of client data – from collection and classification through to access, use, sharing, storage, retention and secure deletion.
You will develop and maintain policies and standards covering areas including:
Client data handling and classification
Data reuse and fair usage
Use of client data within Efficio products
Use of data with AI tools, including third-party and self-hosted solutions
Data access and security
Retention, archiving and secure disposal
Anonymisation and aggregation
Third-party data sharing
Policy exceptions and escalation
You will also help establish and maintain our information asset inventories, data flows and AI asset registers.
A key part of the role will be helping teams determine what we can do with data, under what conditions, and with what safeguards.
You will establish a consistent approach for assessing new and changing data use cases, considering factors such as:
Why the data was originally obtained
Client and contractual restrictions
Data sensitivity and classification
The proposed use and intended recipients
Security and access controls
Retention requirements
Legal, client and reputational considerations
For AI use cases, you will help define which activities are permitted, restricted, require additional review or are prohibited. This will include the use of prompts, uploaded files and connected data sources, as well as expectations around human oversight, output validation and accountability.
You will define the conditions under which client data can be stored or processed using Efficio products, SaaS platforms, cloud services and AI tools.
Working closely with Technology, Information Security, Legal and Privacy teams, you will assess areas including:
Data residency and international transfers
Encryption, access controls and logging
Supplier and subcontractor access
Data retention, backups and deletion
Exit and data-export arrangements
Use of customer data for AI model training, product improvement or other secondary purposes
You will help ensure that unapproved platforms are not used for client data without appropriate assessment and documented approval.
You will work alongside teams designing and deploying new data, software, analytics and AI solutions, providing governance input from an early stage.
Ahead of launch, you will help confirm that the appropriate governance, legal, privacy and security reviews have taken place and that material risks have been appropriately addressed.
Where issues remain, you will recommend practical remediation, escalation or, where necessary, a delay to rollout. Acceptance of significant residual risk will remain with the appropriate executive or governance committee.
This role isn't simply about writing policies. We want to create a governance model that teams can understand and use.
You will help develop:
A clear data governance operating model and decision-rights framework
Practical data, AI, security, reuse and retention policies
Data and AI use-case assessment processes
Risk-classification and escalation models
Policy exception processes and decision registers
Product and AI platform assessment standards
Solution launch-readiness checklists
Training, guidance and supporting materials
Governance reporting for senior leadership and relevant committees
You will coordinate, advise and constructively challenge stakeholders across the organisation while recognising that responsibility for managing data risk is shared across business owners, data owners, Legal and Privacy, Information Security, Technology and senior governance forums.
This will also be an important client-facing role.
You will participate in client discussions where required, confidently explaining Efficio's approach to data governance, security and responsible data use.
You should be comfortable responding to questions about how client data is accessed, used, stored, shared, retained and protected, translating technical or governance concepts into clear, credible explanations for different audiences.
We are looking for someone with experience across one or more of the following areas:
Data governance or data management
Data privacy
Information security
Technology or operational risk
AI governance or responsible AI
You will also bring a practical understanding of modern technology environments, including SaaS, cloud, analytics and AI platforms.
You'll be someone who can operate comfortably between policy and practice – able to understand complex requirements while recognising the commercial and operational realities of a consulting and technology-enabled business.
In particular, you will be able to:
Translate complex regulatory, contractual and security requirements into practical business guidance
Apply proportionate, risk-based judgement rather than relying on a purely rules-based approach
Influence and challenge senior stakeholders constructively
Work effectively across Technology, Security, Legal, Privacy and business teams
Balance commercial objectives and innovation with appropriate governance
Communicate confidently with clients and senior internal stakeholders
Build processes and frameworks that are robust without creating unnecessary bureaucracy
Navigate emerging areas where the answer may not always be immediately clear
Success in this role will mean that teams understand how to use data appropriately rather than simply being told what they cannot do.
We will look at measures including adoption of priority policies, review turnaround times, reduction in unapproved tool usage, effective management of exceptions, quality of governance reporting, stakeholder feedback and a reduction in recurring governance issues.
Ultimately, the role will be judged on its ability to achieve both sides of our data ambition: protecting our clients and Efficio while enabling appropriate, secure and innovative use of data and AI.
