Governance, Risk, and Compliance (GRC) Lead

Key Responsibilities

• Regulatory Analysis Review and interpret global data protection and privacy laws e g GDPR CCPA HIPAA AI Act and their implications for AI ML and data science products
• Compliance Integration Collaborate with product teams to design and implement compliance frameworks into the product development lifecycle
• Risk Assessment Conduct compliance risk assessments for products and features identifying areas that require mitigation or redesign
• Policy Development Develop and maintain compliance policies processes and standards for handling data and building AI ML-driven solutions
• Privacy Engineering Work with engineers to embed privacy-by-design principles into product architecture and ensure compliance with applicable laws
• Audits and Reviews Conduct regular audits of product features and processes to ensure ongoing compliance with global regulations
• Training and Guidance Provide guidance and training to cross-functional teams on compliance requirements and best practices for data protection and AI ethics
• Documentation Create and maintain comprehensive documentation of compliance processes findings and product-related decisions
• Stakeholder Collaboration Act as a liaison between legal engineering and product teams to ensure alignment on compliance goals and initiatives

Education

Bachelor s degree in Computer Science, Data Science, Cybersecurity, Law, or a related field (or equivalent experience).

Technical Skills

• Understanding of global data protection laws such as GDPR, CCPA, and HIPAA, as well as AI-specific regulations like the EU AI Act.
• Familiarity with AI/ML concepts, tools, and platforms, and their implications for compliance.
• Experience in privacy engineering practices such as data minimization, pseudonymization, and differential privacy.
• Proficiency in tools for compliance and risk management (e.g., OneTrust, TrustArc) is a plus.
• Basic programming or scripting skills (e.g., Python, Java) to assess technical implementation of compliance requirements.
• Knowledge of cloud platforms (AWS, Azure, or GCP) and their compliance tools.

Experience

• 3 5 years of experience in a compliance, data protection, or privacy engineering role, ideally involving AI/ML and data science products.
• Hands-on experience integrating compliance frameworks into product development processes.
• Familiarity with conducting risk assessments for technology products.

Soft Skills

• Strong analytical and problem-solving abilities.
• Excellent verbal and written communication skills, with the ability to translate complex legal requirements into actionable product strategies.
• Ability to work collaboratively across diverse teams.
• Detail-oriented and organized, with the ability to manage multiple priorities.

#J-18808-Ljbffr