Privacy & AI Compliance Specialist

IBJ; Gent; Remote; EUR 60,000 - 90,000; Full time

Job summary

Basware is seeking a Privacy & AI Compliance Specialist to join the Legal Team and elevate the Corporate Compliance Program. You will be the first point of contact for compliance questions, escalate high-risk matters, and help shape notices, policies and training across multiple countries.

You will monitor regulatory developments in data privacy and AI, collaborate with Legal, Sourcing, and Product, and ensure audit-ready documentation and timely responses to DSARs.

Qualifications

• Experience in data privacy, AI and/or legal compliance (GDPR/EU AI Act).
• Ability to translate complex regulations into practical guidance.
• Experience with compliance documentation and risk assessments.

Responsibilities

• Support Corporate Compliance Director & DPO in executing the Corporate Compliance Program.
• Maintain privacy, AI and legal compliance documentation and assessments.
• Contribute to training, notices, policies and audits across jurisdictions.

Skills

Data privacy

AI compliance

Regulatory monitoring

Policy guidance

Stakeholder collaboration

Risk assessment

Legal drafting

Communications

Education

Bachelor’s or Master’s degree in law, business or related field

Job description

At Basware, we help organizations around the world automate their accounts payable and e-invoicing processes with cloud-based solutions they can trust. Getting privacy, AI, and legal compliance right is how we earn that trust, and that is where you come in.

As our Privacy & AI Compliance Specialist, you will join the Legal Team and work closely with, and report to, the Corporate Compliance Director & DPO. Together you will bring our Corporate Compliance Program to the next level, with a particular focus on our Data Privacy and AI Compliance Programs. You will be the first point of contact for compliance questions from business teams, **escalate** complex or high-risk matters, keep our documentation and assessments accurate and audit-ready, and help shape the policies, notices, risks and training that guide how we work. You will also keep a close eye on legislative developments in the countries where we operate and make sure the right people understand what they mean in practice.

This is a role for someone who enjoys turning complex regulation into clear, practical guidance, and who wants to work at the intersection of privacy, AI technology and business. You will collaborate with colleagues across Legal, Sourcing, Product, and the business, in an international environment where your work has a visible impact.

If that sounds like you, we would love to hear from you.

Depending on your seniority, your key responsibilities will be to:

• Support the Corporate Compliance Director & DPO in executing the Corporate Compliance Program, in particular the Data Privacy and AI Compliance Programs;
• Organize and maintain data privacy, AI and other legal compliance documentation, including the Records of Processing Activities (RoPA), Data Protection and Data Transfer Impact Assessments and AI Risk Assessments;
• Perform or contribute to data privacy, AI and other legal compliance assessments of solutions, processes and use cases, depending on the risk level;
• Build and maintain legal compliance notices, policies, guidelines and processes;
• Contribute to legal compliance training packages;
• Cooperate in internal and external ISO and other compliance audits by preparing evidence, answering questionnaires and coordinating with internal stakeholders;
• Support the Sourcing and Legal Teams in contractual discussions on data privacy and AI compliance clauses;
• Handle first-line requests for legal compliance advice from business teams and **escalate** complex or high-risk matters to the Corporate Compliance Director & DPO;
• Manage the Data Subject Access Requests (DSARs), ensuring an efficient process to triage, answer and track requests within the applicable deadlines;
• Monitor legislative and regulatory developments in the countries where Basware operates, in selected legal domains including data privacy and AI, and brief the Corporate Compliance Director and Corporate Compliance Domain Owners on changes and their impact.

Skills & Requirements

• Bachelor’s or master’s degree in law, business or similar field.
• 2-5 years of practical experience in data privacy, AI and/or other legal compliance areas, ideally in an international B2B SaaS or other technology environment.
• A business mindset: you give practical, workable guidance rather than staying in the theoretical world of compliance, and you use sound judgment to weigh which risks the business may take and which it should avoid, in consultation with the Corporate Compliance Director, depending on the risk level.
• Experience documenting compliance with legal and regulatory requirements, ideally under the GDPR and/or EU AI Act.
• Experience performing compliance risk assessments, particularly in data privacy and/or AI.
• Experience tracking legislative and regulatory developments across multiple jurisdictions.
• Excellent communication and interpersonal skills, including cultural awareness, empathy, positive mindset and solution oriented.
• Strong written and spoken English, with the ability to turn legal requirements into clear, practical guidance.
• Proficiency in additional EU languages is a plus.
• Practical experience using AI technologies to support your work, e.g. in research, drafting or document analysis and a willingness to further explore and incorporate AI-driven technologies into your work.