Privacy & AI Governance Analyst

About Vasion For more than a decade, Vasion has been helping companies simplify their print infrastructure, automate business processes, and integrate their technology in a more secure environment. Our mission, to make digital transformation attainable for everyone, drives a culture of innovation and exploration. We have one simple goal: help organizations simplify processes through automation and integration. So we created simple, cost-effective, and easy-to-implement digital tools that work together, removing bottlenecks and improving efficiency. And we’re always on the lookout for new people who can help us innovate, grow, and reach our goal. About The Role As Privacy & AI Governance Analyst at Vasion, you will own the execution of our privacy program and AI governance framework, two of the company's highest-externally-visible compliance domains. This is a hands-on builder role, not a coordinator role. You will inherit programs in motion and be expected to run them independently from day one. You will report directly to the General Counsel & Chief Compliance Officer and serve as the company's subject matter expert on all things privacy and AI governance. You will work cross-functionally with Product, Engineering, Security, Sales, Marketing, HR, and Legal to embed compliance into how Vasion builds and operates. You will also support Vasion's obligations as a group health plan sponsor as the company transitions toward a self-funded insurance model. This role is an opportunity to build privacy and AI governance infrastructure at a company in a genuine market moment, where FedRAMP authorization, ISO 42001 certification, and a growing federal customer base make compliance a strategic differentiator, not a back-office function. What You'll Do Own the end-to-end DPA review, redline, and execution process — with authority to approve standard customer DPAs without escalationManage data subject rights (DSR) intake, response, and tracking across GDPR, CCPA, and applicable US state privacy lawsConduct Privacy Impact Assessments (PIAs) for new product features, integrations, and data processing activitiesMaintain and update the subprocessor register and manage vendor subprocessor compliance notificationsLead cookie consent management implementation in partnership with Product and EngineeringOwn privacy policy maintenance, including coordinating updates with Marketing and ensuring accurate web publicationManage Vasion's EU-US Data Privacy Framework compliance obligationsSupport international privacy obligations across Vasion's Germany, UK, and Australia entitiesLead data mapping and privacy GRC tool deployment (active evaluation in progress)Deliver GDPR and privacy training to internal teams AI Governance Program Execution Maintain Vasion's AI model inventory, bias testing documentation, and audit trail recordsDraft and maintain the Responsible AI Use Policy and supporting internal guidanceSupport ongoing ISO 42001 certification maintenance and internal audit readinessMonitor EU AI Act and US state-level AI legislation and assess applicability to Vasion's product and operationsProvide operational support to the AI Governance Committee, coordinating with the CIO and cross-functional membersConduct AI vendor risk assessments in partnership with Security and Procurement Policy Development & Training Own the compliance policy library — drafting, maintaining, versioning, and publishing policies across domainsDesign and deliver privacy and AI governance training programs for internal teamsDevelop plain-language compliance guidance for Engineering, Marketing, Sales, and HRSupport Sales with privacy and AI compliance questionnaire responses and Trust Center content HIPAA Group Health Plan Support Support Vasion's HIPAA obligations as a group health plan sponsor through the transition from level-funded to self-funded coverageAssist with Business Associate Agreement (BAA) management, workforce training coordination, and breach notification proceduresMaintain HIPAA Privacy and Security Policies & Procedures in coordination with the CCO as Security Official Qualifications 3–5 years of experience in a privacy, compliance, or legal operations role — ideally at a technology or SaaS companyWorking knowledge of GDPR and CCPA and the practical mechanics of running a privacy program (not just regulatory familiarity)Experience reviewing, redlining, and negotiating Data Processing Agreements (DPAs)Exposure to AI governance frameworks, ISO 42001, or EU AI Act compliance is a meaningful plusDemonstrated ability to execute across multiple compliance workstreams simultaneously without losing detail or deadline disciplineStrong written communication — you can write a policy people actually read and a training people actually learn fromComfort building in ambiguity — many of the processes you will own are in progress or not yet formalizedCIPP/US, CIPP/E, or CIPM certification held or actively in progress preferredExperience with privacy GRC or consent management tools (OneTrust, MineOS, Osano, or similar) is a plusFamiliarity with HIPAA group health plan compliance is a plus but not required Benefits Flexible work environmentVacation BonusFlexible paid time offPaid parental leaveCompetitive payA full suite of traditional benefitsTraining/Advancement opportunities401k with company match and immediate vestingFinancial wellness educationCompany-contributed HSAOn-site perks include gym, pickleball, snacks & drinks, arcade, theater room, etc. Our Core Values Vasion looks for people who will exemplify its four core values and are driven to become: Disruptive Visionaries: Our customers are the heroes, and our role is to be a guide on their journey, truly listening and identifying the needs and wants of our customers.Relationship Builders: We treat people as people, building strong relationships through empathy, compassion, and honest communication.Candor Seekers: Candid conversations are critical to achieving objectives, and we nurture a culture of caring personally and challenging directly.Action Owners: Every employee takes ownership of any failures and develops a plan to win, no matter their tenure or circumstance. More About Vasion Visit https://www.vasion.com to learn more about Vasion. Additional Information Vasion is an equal opportunity employer. We evaluate qualified applicants without regard to race, age, color, religion, sex, national origin, disability, veteran status, gender identity, sexual orientation and other legally protected characteristics.