Privacy & AI Governance Lead (SaaS)

Vasion; Lehi (UT); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Flexible work environment

Vacation Bonus

Flexible paid time off

Paid parental leave

Competitive pay

Training/Advancement opportunities

401k with company match

HSA

On-site gym & amenities

Job summary

Vasion seeks a Privacy & AI Governance Analyst to own the execution of privacy and AI governance. You will lead end-to-end DPAs, DPIAs, and policy updates, working across Product, Engineering, Security, Sales, Marketing, HR, and Legal.

You will drive data mapping, training, and vendor risk assessments while supporting HIPAA considerations as the company scales internationally. This role is hands-on and independent from day one.

Qualifications

• 3–5 years in privacy, compliance, or legal ops at tech or SaaS.
• Working knowledge of GDPR/CCPA and practical privacy program ops.
• Experience reviewing, redlining, negotiating DPAs.
• Exposure to AI governance, ISO 42001, or EU AI Act is a plus.
• Ability to manage multiple compliance workstreams with discipline.
• CIPP/US, CIPP/E, or CIPM in progress or held preferred.
• Experience with privacy GRC or consent tools (OneTrust, MineOS, Osano) is a plus.

Responsibilities

• Own end-to-end DPA review, redline and execution process with authority.
• Manage DSR intake, response, and tracking across GDPR/CCPA.
• Conduct Privacy Impact Assessments for new features and processing.
• Maintain subprocessor register and vendor compliance notifications.
• Lead cookie consent management in partnership with Product/Engineering.
• Own privacy policy maintenance and web publication coordination.
• Manage GDPR and US data privacy framework obligations.
• Support privacy obligations across Germany, UK, Australia entities.
• Lead data mapping and privacy GRC tool deployment.
• Deliver GDPR and privacy training to internal teams.
• AI governance: maintain model inventory, bias testing docs.
• Draft and maintain Responsible AI Use Policy and guidance.
• Support ISO 42001 certification maintenance and audits readiness.
• Monitor EU AI Act and US state AI legislation for applicability.
• Provide operational support to AI Governance Committee.
• Conduct AI vendor risk assessments with Security/Procurement.

Skills

Privacy program execution

AI governance

DPA negotiation

GDPR & CCPA

Policy drafting

Privacy GRC tools

CIPP/CIPM in progress

Vendor management

Tools

OneTrust

MineOS

Osano

Job description

Vasion seeks a Privacy & AI Governance Analyst to own the execution of privacy and AI governance. You will lead end-to-end DPAs, DPIAs, and policy updates, working across Product, Engineering, Security, Sales, Marketing, HR, and Legal.

You will drive data mapping, training, and vendor risk assessments while supporting HIPAA considerations as the company scales internationally. This role is hands-on and independent from day one.