AI & Data Governance Director

• Pioneer Data and AI Governance frameworks


• Ensure data tracking, DLP/DSPM enforcement, and privacy posture remain uncompromised as the technology ecosystem evolves


• Translate written data classification policies into precise, testable technical requirements for InfoSec


• Design and execute validation protocols for DSPM/DLP rules


• Serve as a core member of the enterprise AI Governance Committee


• Own and maintain the enterprise AI Allowlist


• Ensure employees can verify whether AI usage is allowed, disallowed, or requires review


• Manage tracking, recording, and reporting of data flows


• Monitor intersections between restricted/confidential data and AI


• Utilize OneTrust to maintain RoPA, conduct DPIAs, and manage AI vendor risk assessments


• Monitor emerging AI capabilities and changing regulatory frameworks


• Update internal policies and procedures to address new risks


• Use DSPM telemetry to refine corporate data protection rules


• Act as strategic liaison between Legal, Security, and Engineering


• Embed privacy-by-design into technical architectures


• Resolve complex false-positive escalations

Requirements

• Bachelor’s Degree in IT, Computer Science, Law, or Information Security


• 7+ years in Data Governance, Privacy Engineering, Information Security, or a related field


• Strong understanding of LLMs


• Strong understanding of OneTrust


• Experience generating requirements for DSPM/DLP tools


• Deep knowledge of GDPR, CCPA, and emerging frameworks including NIST and the EU AI Act


• Preferred: Master’s Degree or JD


• Preferred: Privacy Engineering


• Preferred: 10+ years acting as a functional lead in GRC or Privacy architecture


• Preferred: CIPP/E, CIPT, CISSP, or equivalent certifications

Core Competencies

Demonstrates expertise in Data Governance and Privacy Engineering, with a strong focus on regulatory compliance and the implementation of AI Governance frameworks. Proficient in utilizing tools like OneTrust for data protection and risk assessment while ensuring adherence to GDPR, CCPA, and other emerging regulations.

Highest-signal resume keywords

• Data Governance


• Privacy Engineering


• OneTrust


• GDPR Compliance


• DSPM/DLP Tools

Hard Skills

• Data Classification


• Data Tracking


• DLP Enforcement


• DSPM Validation Protocols


• AI Governance Frameworks


• Technical Requirements Generation


• Data Flow Management


• Privacy-by-Design


• False-Positive Resolution


• Regulatory Framework Monitoring

Soft Skills

• Strategic Liaison


• Collaboration

Certifications & Qualifications

• CIPP/E


• CIPT


• CISSP

Industry Keywords

• Information Security


• Data Privacy


• GRC


• AI Risk Assessment


• NIST


• EU AI Act

Tools & Technologies

• OneTrust