Privacy & AI Compliance Specialist

Basware; Oost-Vlaanderen; On-site; EUR 70,000 - 110,000; Full time

Job summary

Basware is seeking a Privacy & AI Compliance Specialist to join the Legal Team. You will work with the Corporate Compliance Director & DPO to advance Data Privacy and AI compliance, manage documentation, assessments, and audits, and advise business teams on complex regulatory matters.

You will monitor regulatory developments, assist with training, and coordinate across Legal, Sourcing, Product, and business units in an international environment where your guidance has a tangible impact.

Qualifications

• Bachelor's or master's degree in law, business or similar field.
• 2-5 years of practical experience in data privacy, AI and/or other legal compliance areas, ideally in an international B2B SaaS or other technology environment.
• Business-minded with practical guidance, weighing risks with the Corporate Compliance Director.
• Experience documenting compliance with GDPR and/or EU AI Act.
• Experience performing compliance risk assessments in data privacy and/or AI.
• Experience tracking legislative developments across multiple jurisdictions.
• Excellent written and spoken English with ability to translate legal requirements into practical guidance.
• Proficiency in additional EU languages is a plus.
• Experience using AI technologies to support work, drafting or document analysis.

Responsibilities

• Support the Corporate Compliance Director & DPO in executing the Corporate Compliance Program, focusing on Data Privacy and AI Compliance.
• Organize and maintain data privacy, AI, and other legal compliance documentation (RoPA, Data Protection and Data Transfer Impact Assessments, AI Risk Assessments).
• Perform or contribute to data privacy, AI and other legal compliance assessments of solutions and processes.
• Build and maintain legal compliance notices, policies, guidelines and processes.
• Contribute to legal compliance training packages.
• Cooperate in internal and external ISO and other audits by preparing evidence and coordinating with stakeholders.
• Support contracting discussions on data privacy and AI compliance clauses.
• Handle first-line requests for legal compliance advice and escalate high-risk matters as needed.
• Manage DSARs efficiently, triaging, answering and tracking within deadlines.
• Monitor regulatory developments in data privacy and AI, briefing leadership on changes and impact.

Skills

Data privacy

AI compliance

Regulatory compliance

DSAR handling

Risk assessments

Audits

Documentation

Stakeholder management

Communication skills

English proficiency

EU language skills (plus)

Education

Bachelor's/Master's in law or similar

Job description

At Basware, we help organizations around the world automate their accounts payable and e-invoicing processes with cloud-based solutions they can trust. Getting privacy, AI, and legal compliance right is how we earn that trust, and that is where you come in.

As our Privacy & AI Compliance Specialist, you will join the Legal Team and work closely with, and report to, the Corporate Compliance Director & DPO. Together you will bring our Corporate Compliance Program to the next level, with a particular focus on our Data Privacy and AI Compliance Programs. You will be the first point of contact for compliance questions from business teams, escape complex or high-risk matters, keep our documentation and assessments accurate and audit-ready, and help shape the policies, notices, risks and training that guide how we work. You will also keep a close eye on legislative developments in the countries where we operate and make sure the right people understand what they mean in practice.

This is a role for someone who enjoys turning complex regulation into clear, practical guidance, and who wants to work at the intersection of privacy, AI technology and business. You will collaborate with colleagues across Legal, Sourcing, Product, and the business, in an international environment where your work has a visible impact.

If that sounds like you, we would love to hear from you.

Depending on your seniority, your key responsibilities will be to:

• Support the Corporate Compliance Director & DPO in executing the Corporate Compliance Program, in particular the Data Privacy and AI Compliance Programs;
• Organize and maintain data privacy, AI and other legal compliance documentation, including the Records of Processing Activities (RoPA), Data Protection and Data Transfer Impact Assessments and AI Risk Assessments;
• Perform or contribute to data privacy, AI and other legal compliance assessments of solutions, processes and use cases, depending on the risk level;
• Build and maintain legal compliance notices, policies, guidelines and processes;
• Contribute to legal compliance training packages;
• Cooperate in internal and external ISO and other compliance audits by preparing evidence, answering questionnaires and coordinating with internal stakeholders;
• Support the Sourcing and Legal Teams in contractual discussions on data privacy and AI compliance clauses;
• Handle first-line requests for legal compliance advice from business teams and escape complex or high-risk matters to the Corporate Compliance Director & DPO;
• Manage the Data Subject Access Requests (DSARs), ensuring an efficient process to triage, answer and track requests within the applicable deadlines;
• Monitor legislative and regulatory developments in the countries where Basware operates, in selected legal domains including data privacy and AI, and brief the Corporate Compliance Director and Corporate Compliance Domain Owners on changes and their impact. ,
• Bachelor's or master's degree in law, business or similar field.
• 2-5 years of practical experience in data privacy, AI and/or other legal compliance areas, ideally in an international B2B SaaS or other technology environment.
• A business mindset: you give practical, workable guidance rather than staying in the theoretical world of compliance, and you use sound judgment to weigh which risks the business may take and which it should avoid, in consultation with the Corporate Compliance Director, depending on the risk level.
• Experience documenting compliance with legal and regulatory requirements, ideally under the GDPR and/or EU AI Act.
• Experience performing compliance risk assessments, particularly in data privacy and/or AI.
• Experience tracking legislative and regulatory developments across multiple jurisdictions.
• Excellent communication and interpersonal skills, including cultural awareness, empathy, positive mindset and solution oriented.
• Strong written and spoken English, with the ability to turn legal requirements into clear, practical guidance.
• Proficiency in additional EU languages is a plus.
• Practical experience using AI technologies to support your work, e.g. in research, drafting or document analysis and a willingness to further explore and incorporate AI-driven technologies into your work.