AI & Data Governance Director

Modernizing-Medicine,-Inc.; Boca Raton (FL); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) matching 50% up to 6%

Paid time off & parental leave

Tuition reimbursement & LinkedIn学习

Hybrid/remote options for some roles

Dog-friendly HQ in the US

Job summary

ModMed, headquartered in Boca Raton, FL, seeks a Director of AI & Data Governance to lead governance across our AI-enabled healthcare platform. You will translate data policies into concrete requirements and drive validation protocols to enforce privacy outcomes.

You will own the AI allowlist, oversee DPIAs with OneTrust, and collaborate with Legal, Security, and Engineering to embed privacy-by-design as diagrams and architectures evolve.

Qualifications

• 7+ years in Data Governance, Privacy Engineering, or related field.
• Strong knowledge of GDPR, CCPA, NIST, EU AI Act.
• Experience with DSPM/DLP tools and AI governance.
• Lead cross-functional partnerships between Legal, Security, and Engineering.

Responsibilities

• Translate data classification policies into precise technical requirements for InfoSec.
• Own the enterprise AI Allowlist and ensure it is accessible for policy verification.
• Manage data flows visibility, RoPA, DPIAs, and vendor risk assessments using OneTrust.
• Monitor AI capabilities and regulatory changes; update policies accordingly.

Skills

Data Governance

Privacy Engineering

GRC Leadership

OneTrust

DSPM Tools

LLMs Knowledge

Regulatory Knowledge

Stakeholder Collaboration

Education

Bachelor's in IT/CS/Law

Master's or JD (preferred)

Tools

OneTrust

Job description

Join the Team Modernizing MedicineAt ModMed, we’re not just building software—we’re reimagining the healthcare experience. Founded in 2010 by a practicing physician and a successful tech entrepreneur, we took a radically different approach: we hired doctors and taught them how to code. This \"for doctors, by doctors\" philosophy has allowed us to create an AI-enabled, specialty-specific cloud platform that places patients at the center of care.A Culture of ExcellenceWhen you join ModMed, you’re joining an award-winning team recognized for innovation and employee satisfaction. From our global headquarters in Boca Raton Florida, and extensive employee base in Hyderabad India, we are a team of 4,500+ passionate problem-solvers on a mission to increase medical practice success and improve patient outcomes:Consistently ranked as a Top Place to Work2025 Globee Business Awards: Gold Globee for “Technology Team of the Year”2025 Black Book Awards: Ranked #1 EHR in 11 SpecialtiesFlorida Venture Forum: Venture-Backed Company of the YearWe are growing fast, thinking big, and we are just getting started.Ready to modernize medicine with us?Job Description Summary:The Director, AI & Data Governance pioneers our Data and AI Governance frameworks, ensuring that as our technology ecosystem evolves with emerging, allowlisted AI technologies, our data tracking, DLP/DSPM enforcement, and overall privacy posture remain uncompromised.Your Role:Implementation Oversight & Requirement Engineering - Translate written data classification policies into precise, testable technical requirements for InfoSec. Design and execute validation protocols to ensure the tuning of DSPM/DLP rules actively achieves mandated privacy outcomes.AI Governance & Allowlist Management - Serve as a core member of the enterprise AI Governance Committee. Own the enterprise AI Allowlist, ensuring it is accurate and highly accessible to employees to verify if AI usage is allowed, disallowed, or needs review.Data Visibility & Tooling Ecosystem - Manage the process for tracking, recording, and reporting data flows, including where restricted/confidential data intersects with AI. Utilize OneTrust to maintain RoPA, conduct DPIAs, and manage AI vendor risk assessments.Strategy & Policy Evolution - Monitor emerging AI capabilities and changing regulatory frameworks (e.g., EU AI Act, NIST AI RMF). Update internal policies and procedures to address new risks, using real-world telemetry from DSPM to refine corporate data protection rules.Cross-Functional Orchestration - Act as the strategic liaison between Legal, Security, and Engineering. Influence without direct authority to embed privacy-by-design into technical architectures and resolve complex false-positive escalations gracefully.Skills & Requirements:Bachelor’s Degree, IT, Computer Science, Law, or Information Security7+ years in Data Governance, Privacy Engineering, Information Security, or a related fieldStrong understanding of LLMs, OneTrust, and generating requirements for DSPM/DLP tools. Deep knowledge of GDPR, CCPA, and emerging frameworks (NIST, EU AI Act).Preferred:Master’s Degree or JD, Privacy Engineering10+ years acting as a functional lead in GRC or Privacy architectureCIPP/E, CIPT, CISSP, or equivalent certifications preferred.ModMed Benefits Highlight: At ModMed, we believe it’s important to offer a competitive benefits package designed to meet the diverse needs of our growing workforce. Eligible Modernizers can enroll in a wide range of benefits:United StatesComprehensive medical, dental, and vision benefits, including a company Health Savings Account contribution,401(k): ModMed provides a matching contribution each payday of 50% of your contribution deferred on up to 6% of your compensation. After one year of employment with ModMed, 100% of any matching contribution you receive is yours to keep.Generous Paid Time Off and Paid Parental Leave programs,Company paid Life and Disability benefits, Flexible Spending Account, and Employee Assistance Programs,Company-sponsored Business Resource & Special Interest Groups that provide engaged and supportive communities within ModMed,Professional development opportunities, including tuition reimbursement programs and unlimited access to LinkedIn Learning,Global presence and in-person collaboration opportunities; dog-friendly HQ (US), Hybrid office-based roles and remote availability for some roles,Weekly catered breakfast and lunch, treadmill workstations, Zen, and wellness rooms within our BRIC headquarters.PHISHING SCAM WARNING: ModMed is among several companies recently made aware of a phishing scam involving imposters posing as hiring managers recruiting via email, text and social media. The imposters are creating misleading email accounts, conducting remote \"interviews,\" and making fake job offers in order to collect personal and financial information from unsuspecting individuals. Please be aware that no job offers will be made from ModMed without a formal interview process, and valid communications from our hiring team will come from our employees with a ModMed email address ([e-mail]). Please check senders’ email addresses carefully. Additionally, ModMed will not ask you to purchase equipment or supplies as part of your onboarding process. If you are receiving communications as described above, please report them to the FTC website.