Privacy & AI Governance Lead

Vasion, Inc.; Lehi (UT); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401k with company match

Company-contributed HSA

On-site gym

Flexible paid time off

Vacation bonus

Paid parental leave

Job summary

Vasion, Inc. in Lehi, Utah seeks a Privacy & AI Governance Analyst to own the privacy program and AI governance framework from day one, reporting to the General Counsel & Chief Compliance Officer.

You will work cross-functionally with Product, Engineering, Security, Sales, Marketing, HR, and Legal to embed compliance into how Vasion builds and operates. You will also support Vasion’s HIPAA obligations as a group health plan sponsor, and help drive FedRAMP authorization, ISO 42001 certification,

Qualifications

• 3–5 years in privacy, compliance, or legal operations at a tech/SaaS company
• Working knowledge of GDPR and CCPA and practical privacy program execution
• Experience reviewing, redlining, and negotiating DPAs
• Exposure to ISO 42001 or EU AI Act compliance is a plus
• Strong written communication; able to draft policy and training
• Ability to manage multiple workstreams with deadlines
• CIPP/US, CIPP/E, or CIPM preferred
• Experience with privacy GRC or consent tools (OneTrust, MineOS, Osano) is a plus
• HIPAA familiarity is a plus but not required

Responsibilities

• Own end-to-end DPA review, redline, and execution
• Manage DSR intake and responses for GDPR/CCPA
• Conduct Privacy Impact Assessments for new features and data processing
• Maintain subprocessor register and vendor notification compliance
• Own privacy policy updates and publication
• Manage EU-US Data Privacy Framework obligations
• Support privacy obligations for Germany, UK, and Australia entities
• Lead data mapping and privacy GRC tool deployment
• Deliver GDPR and privacy training to internal teams
• Maintain AI model inventory, bias testing, audit trails
• Draft Responsible AI Use Policy and guidance
• Support ISO 42001 certification maintenance
• Monitor EU AI Act and US state AI legislation
• Coordinate with AI Governance Committee
• Conduct AI vendor risk assessments
• Own compliance policy library and publishing
• Design privacy and governance training programs
• Develop plain-language guidance for Eng/Marketing/Sales/HR
• Support Sales with privacy questionnaire responses
• Support HIPAA obligations as group health plan sponsor
• BAA management and breach notification procedures
• Maintain HIPAA Policies & Procedures with Security
• Maintain on-site perks and benefits communications

Skills

Privacy program management

GDPR & CCPA knowledge

DPA review & negotiation

AI governance familiarity

Cross-functional collaboration

Policy writing

Ambiguity tolerance

CIPP/US or CIPM in progress

Privacy GRC tools (OneTrust/Osano/Mine

HIPAA familiarity

Tools

OneTrust

MineOS

Osano

Job description

Vasion, Inc. in Lehi, Utah seeks a Privacy & AI Governance Analyst to own the privacy program and AI governance framework from day one, reporting to the General Counsel & Chief Compliance Officer.

You will work cross-functionally with Product, Engineering, Security, Sales, Marketing, HR, and Legal to embed compliance into how Vasion builds and operates. You will also support Vasion’s HIPAA obligations as a group health plan sponsor, and help drive FedRAMP authorization, ISO 42001 certification,