Enterprise Privacy & AI Risk Leader (Hybrid)

System One, Inc.; Merrifield (VA); Hybrid; USD 140,000 - 200,000; Full time

Job summary

System One, Inc. in Vienna, VA is seeking a Senior Enterprise Privacy Governance and Risk-Management Analyst for a multiyear contract.

The role requires 10+ years of privacy program experience, 2LOD oversight, PIAs/PRAs, governance, risk management, and AI privacy governance with the ability to create practical governance documents, risk assessments, metrics, and remediation plans. The position focuses on maturing the enterprise privacy framework, overseeing PIAs/PRAs, managing third-party

Qualifications

• At least 10 years of privacy program experience, with 2LOD oversight, PIAs/PRAs, governance, risk management, financial-services regulation, third-party privacy, and emerging AI privacy risks.
• Experience designing, implementing, and maturing enterprise privacy programs, ideally in highly regulated financial institutions and a 2LOD environment.
• Ability to produce practical governance documents, risk assessments, metrics, reports, and remediation plans.

Responsibilities

• Mature and maintain the enterprise privacy governance framework, policies, standards, and procedures.
• Oversee PIAs and PRAs, including intake, review, tracking, escalation, and reporting.
• Support privacy risk management, RCSA activities, control assessments, issue remediation, KRIs, and executive reporting.
• Conduct third-party privacy reviews and coordinate with Procurement, Legal, Compliance, Security, and business teams.
• Evaluate privacy risks related to AI and advanced analytics and apply Privacy-by-Design principles.
• Partner with Business Units to improve privacy awareness, training, adoption, and risk visibility.
• Align privacy requirements with Data Governance, Data Sharing, Records Management, and AI Governance.
• Support regulatory, audit, and risk management responses.
• Translate regulatory requirements into practical governance policies, controls, and processes.
• Work across Legal, Compliance, Security, Technology, Data Management, and stakeholders.

Skills

Privacy governance

Risk management

PII handling

AI privacy

Regulatory compliance

Job description

System One, Inc. in Vienna, VA is seeking a Senior Enterprise Privacy Governance and Risk-Management Analyst for a multiyear contract.

The role requires 10+ years of privacy program experience, 2LOD oversight, PIAs/PRAs, governance, risk management, and AI privacy governance with the ability to create practical governance documents, risk assessments, metrics, and remediation plans. The position focuses on maturing the enterprise privacy framework, overseeing PIAs/PRAs, managing third-party