Senior Compliance Specialist – Data & AI Governance

Details

We are seeking an independent contractor to design and operationalize a privacy governance and violation management operating model. This specialist will establish formal decision models and accountability structures to turn technical privacy monitoring into a clear, day-to-day process for handling issues. The role will define ownership, ensure violations are handled according to service-level agreements (SLAs), and establish metrics that provide assurance over privacy risks.

Responsibilities

• Partner with Privacy Legal, Risk, and Platform owners to establish a violation decision model for classifying detected privacy violations, including immediate remediation, accepted exceptions, and policy updates.
• Document and map mandatory next steps for each violation category, including tracking paths, resolution targets, SLAs, and designated owners.
• Monitor and accelerate the resolution of high- and very-high-risk privacy violations, ensuring they are remediated or safely mitigated within defined SLAs.
• Define ownership and accountability for policy governance, exception approvals, violation escalations, and regulatory reporting.
• Develop key performance indicators (KPIs) and key risk indicators (KRIs) for open violations, exception aging, and remediation times, including escalation triggers for overdue items.
• Align the privacy violation workflow with existing company-wide privacy risk processes and ensure it produces reliable evidence for audits and regulators.
• Design a closed-loop feedback process to analyze recurring violation patterns and help teams update policies, system rules, and engineering backlogs.
• Lead workshops with Legal, Risk, Security, and Engineering teams to build consensus and support collaboration.
• Draft practical standard operating procedures (SOPs) and response templates for day-to-day violation management.
• Prepare training materials and handover documentation to transition the governance model to permanent internal owners at the end of the contract.

Requirements

• Ability to impact-assess privacy violations and define remediation paths.
• Practical understanding of GDPR and privacy risk frameworks.
• Proven experience building governance, issue, or violation management processes from the ground up.
• Strong communication skills and the ability to work independently with Legal, Engineering, and leadership teams.
• Experience interacting with senior stakeholders up to Director, Senior Director, and VP level.

Contract Details

• Independent contractor engagement.
• Six-month timeline from October 1, 2026, to March 31, 2027.
• 40 hours per week.