Data Privacy and AI Governance Manager

About the role

CohnReznick is seeking a Data Privacy and AI Governance Manager to join our Legal team. This position is considered remote, meaning job duties do not require proximity to a CohnReznick office, though occasional in-office presence may be required for client work, team meetings, or trainings.

Responsibilities

• Develop, implement, and maintain the organization’s data privacy program, including an AI governance framework with policies, procedures, and controls.
• Ensure compliance with applicable data privacy and AI laws and regulations.
• Partner with business, legal, and technology teams to manage privacy risks, support data governance initiatives, and embed privacy-by-design principles across the organization.
• Collaborate with Technology, AI, and Governance, Risk, and Compliance teams to ensure internal controls for AI usage and personal data processing, align enterprise data standards with regulatory requirements, and support policy development on data handling and responsible AI use.
• Establish continuous discovery mechanisms to identify, map, assess, and mitigate “Shadow AI” tools and unauthorized use cases.
• Integrate AI governance and privacy requirements into product development, procurement, and implementation, ensuring alignment with data and information governance to support AI adoption.
• Oversee governance for agentic AI and autonomous workflows, including human-in-the-loop protocols and manual override requirements.
• Lead and facilitate the AI Governance Committee to define governance processes, risk tiers, and approval pathways based on materiality, impact, and regulatory exposure.
• Assist in developing and delivering training programs and communications to promote a culture of responsible AI use.
• Report on program status, risk metrics, and compliance issues to senior leadership and relevant stakeholders.
• Stay up-to-date on emerging AI regulations (e.g., AI Act) and data privacy laws.

Requirements

• Bachelor’s degree in a relevant field (e.g., Computer Science, Data Science, Law, Information Systems, or similar).
• 5+ years of experience in data privacy, compliance, or risk management roles, or equivalent experience implementing technology governance or privacy programs, including leading AI governance.
• Strong knowledge of data protection regulations (such as GDPR, CCPA) and familiarity with AI governance frameworks (e.g., EU AI Act risk tiers, NIST AI RMF, ISO/IEC 42001).
• Understanding of artificial intelligence and machine learning concepts and their risks, including data provenance, explainability limits, model drift, algorithmic bias audits, and guardrails against prompt injection and training data leakage.
• Familiarity with AI evaluation frameworks and methodologies, and experience designing or conducting AI evaluations.
• Proven ability to develop and enforce policies or governance frameworks, conduct risk assessments or audits, and drive governance programs.
• Excellent communication and interpersonal skills, with the ability to work cross-functionally and influence stakeholders at all levels.
• Demonstrated commitment to ethical technology use, protecting privacy, and leading cross-departmental initiatives.
• Strong analytical decision-making and problem-solving capabilities.

Preferred Qualifications

• Advanced degree in Law, Business, Data Science, or related field, or certifications in privacy or risk management (e.g., CIPM, CIPT, CIPP).
• Experience implementing AI governance frameworks or privacy compliance programs within complex organizations, especially in regulated industries (finance, healthcare).
• Experience using AI GRC automation tools such as OneTrust or Credo AI.
• Experience engaging with regulators, auditors, or industry consortia on compliance or AI governance topics.

Why CohnReznick?

At CohnReznick, we’re united by a common mission to create opportunity, value, and trust for our clients, people, and communities. We offer a robust Total Rewards package, including generous PTO, a flexible work environment, expanded parental leave, extensive learning and development opportunities, and paid time off for volunteering. The firm fosters a culture of collaboration, innovation, and work-life balance.