Head of AI & Data Governance — Hybrid/Remote

Modernizing Medicine, Inc.; United States; Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health, dental, vision benefits

401(k) with matching up to 6%

Paid time off & parental leave

Hybrid/remote flexibility

Job summary

ModMed is seeking a Director of AI & Data Governance to lead data governance, privacy engineering, and AI policy programs. You will drive the enterprise AI allowlist, ensure DSPM/DLP rule effectiveness, and coordinate with Legal, Security, and Engineering to embed privacy-by-design.

Questo role requires deep GDPR/CCPA knowledge, experience with OneTrust, and awareness of NIST/EU AI Act frameworks. The position offers a hybrid work model with opportunities across the US.

Qualifications

• Bachelor’s degree in IT, CS, Law, or Information Security.
• 7+ years in Data Governance, Privacy Engineering, Information Security, or a related field.
• Strong understanding of LLMs, OneTrust, and generating requirements for DSPM/DLP tools.
• Deep knowledge of GDPR, CCPA, and emerging frameworks (NIST, EU AI Act).
• Preferred: Master’s Degree or JD, Privacy Engineering 10+ years acting as a functional lead in GRC or Privacy architecture.
• CIPP/E, CIPT, CISSP, or equivalent certifications preferred.

Responsibilities

• Implementation Oversight & Requirement Engineering - Translate written data classification policies into precise, testable technical requirements for InfoSec. Design and execute validation protocols to ensure the tuning of DSPM/DLP rules actively achieves mandated privacy outcomes.
• AI Governance & Allowlist Management - Serve as a core member of the enterprise AI Governance Committee. Own the enterprise AI Allowlist, ensuring it is accurate and highly accessible to employees to verify if AI usage is allowed, disallowed, or needs review.
• Data Visibility & Tooling Ecosystem - Manage the process for tracking, recording, and reporting data flows, including where restricted/confidential data intersects with AI. Utilize OneTrust to maintain RoPA, conduct DPIAs, and manage AI vendor risk assessments.
• Strategy & Policy Evolution - Monitor emerging AI capabilities and changing regulatory frameworks (e.g., EU AI Act, NIST AI RMF). Update internal policies and procedures to address new risks, using real-world telemetry from DSPM to refine corporate data protection rules.
• Cross-Functional Orchestration - Act as the strategic liaison between Legal, Security, and Engineering. Influence without direct authority to embed privacy-by-design into technical architectures and resolve complex false-positive escalations gracefully.

Skills

LLMs awareness

OneTrust familiarity

DSPM/DLP requirements

GDPR knowledge

CCPA knowledge

NIST/EU AI Act knowledge

Education

Bachelor's in IT or CS or Information Security

Master's or JD preferred

Tools

OneTrust

DSPM tools

Job description

ModMed is seeking a Director of AI & Data Governance to lead data governance, privacy engineering, and AI policy programs. You will drive the enterprise AI allowlist, ensure DSPM/DLP rule effectiveness, and coordinate with Legal, Security, and Engineering to embed privacy-by-design.

Questo role requires deep GDPR/CCPA knowledge, experience with OneTrust, and awareness of NIST/EU AI Act frameworks. The position offers a hybrid work model with opportunities across the US.