Governance, Risk, and Compliance (GRC) Lead

Key Responsibilities: • Regulatory Analysis: Review and interpret global data protection and privacy laws (e.g., GDPR, CCPA, HIPAA, AI Act) and their implications for AI, ML, and data science products. • Compliance Integration: Collaborate with product teams to design and implement compliance frameworks into the product development lifecycle. • Risk Assessment: Conduct compliance risk assessments for products and features, identifying areas that require mitigation or redesign. • Policy Development: Develop and maintain compliance policies, processes, and standards for handling data and building AI/ML-driven solutions. • Privacy Engineering: Work with engineers to embed privacy-by-design principles into product architecture and ensure compliance with applicable laws. • Audits and Reviews: Conduct regular audits of product features and processes to ensure ongoing compliance with global regulations. • Training and Guidance: Provide guidance and training to cross-functional teams on compliance requirements and best practices for data protection and AI ethics. • Documentation: Create and maintain comprehensive documentation of compliance processes, findings, and product-related decisions. • Stakeholder Collaboration: Act as a liaison between legal, engineering, and product teams to ensure alignment on compliance goals and initiatives. Education: Bachelor s degree in Computer Science, Data Science, Cybersecurity, Law, or a related field (or equivalent experience). Technical Skills: • Understanding of global data protection laws such as GDPR, CCPA, and HIPAA, as well as AI-specific regulations like the EU AI Act. • Familiarity with AI/ML concepts, tools, and platforms, and their implications for compliance. • Experience in privacy engineering practices such as data minimization, pseudonymization, and differential privacy. • Proficiency in tools for compliance and risk management (e.g., OneTrust, TrustArc) is a plus. • Basic programming or scripting skills (e.g., Python, Java) to assess technical implementation of compliance requirements. • Knowledge of cloud platforms (AWS, Azure, or GCP) and their compliance tools. Experience: • 3 5 years of experience in a compliance, data protection, or privacy engineering role, ideally involving AI/ML and data science products. • Hands-on experience integrating compliance frameworks into product development processes. • Familiarity with conducting risk assessments for technology products. Soft Skills: • Strong analytical and problem-solving abilities. • Excellent verbal and written communication skills, with the ability to translate complex legal requirements into actionable product strategies. • Ability to work collaboratively across diverse teams. • Detail-oriented and organized, with the ability to manage multiple priorities.