Governance, Risk, and Compliance (GRC) Lead

Key Responsibilities

• Regulatory Analysis: Review and interpret global data protection and privacy laws (e.g., GDPR, CCPA, HIPAA, AI Act) and their implications for AI, ML, and data science products
• Compliance Integration: Collaborate with product teams to design and implement compliance frameworks into the product development lifecycle
• Risk Assessment: Conduct compliance risk assessments for products and features, identifying areas that require mitigation or redesign
• Policy Development: Develop and maintain compliance policies, processes, and standards for handling data and building AI/ML-driven solutions
• Privacy Engineering: Work with engineers to embed privacy-by-design principles into product architecture and ensure compliance with applicable laws
• Audits and Reviews: Conduct regular audits of product features and processes to ensure ongoing compliance with global regulations
• Training and Guidance: Provide guidance and training to cross-functional teams on compliance requirements and best practices for data protection and AI ethics
• Documentation: Create and maintain comprehensive documentation of compliance processes, findings, and product-related decisions
• Stakeholder Collaboration: Act as a liaison between legal, engineering, and product teams to ensure alignment on compliance goals and initiatives
• Desired Candidate Profile

Education

Bachelor s degree in Computer Science, Data Science, Cybersecurity, Law, or a related field (or equivalent experience).

Technical Skills

• Understanding of global data protection laws such as GDPR, CCPA, and HIPAA, as well as AI-specific regulations like the EU AI Act
• Familiarity with AI/ML concepts, tools, and platforms, and their implications for compliance
• Experience in privacy engineering practices such as data minimization, pseudonymization, and differential privacy
• Proficiency in tools for compliance and risk management (e.g., OneTrust, TrustArc) is a plus
• Basic programming or scripting skills (e.g., Python, Java) to assess technical implementation of compliance requirements
• Knowledge of cloud platforms (AWS, Azure, or GCP) and their compliance tools

Experience

3 5 years of experience in a compliance, data protection, or privacy engineering role, ideally involving AI/ML and data science products. Hands-on experience integrating compliance frameworks into product development processes. Familiarity with conducting risk assessments for technology products. Soft

Skills

• Strong analytical and problem-solving abilities
• Excellent verbal and written communication skills, with the ability to translate complex legal requirements into actionable product strategies
• Ability to work collaboratively across diverse teams
• Detail-oriented and organized, with the ability to manage multiple priorities