Privacy and AI Governance Analyst

About Vasion For more than a decade, Vasion has been helping companies simplify their print infrastructure, automate business processes, and integrate their technology in a more secure environment. Our mission, to make digital transformation attainable for everyone, drives a culture of innovation and exploration. We have one simple goal: help organizations simplify processes through automation and integration. So we created simple, cost-effective, and easy-to-implement digital tools that work together, removing bottlenecks and improving efficiency. And we're always on the lookout for new people who can help us innovate, grow, and reach our goal. About the role As Privacy and AI Governance Analyst at Vasion, you will own the execution of our privacy program and AI governance framework, two of the company's highest-externally-visible compliance domains. This is a hands-on builder role, not a coordinator role. You will inherit programs in motion and be expected to run them independently from day one. You will report directly to the General Counsel and Chief Compliance Officer and serve as the company's subject matter expert on all things privacy and AI governance. You will work cross-functionally with Product, Engineering, Security, Sales, Marketing, HR, and Legal to embed compliance into how Vasion builds and operates. You will also support Vasion's obligations as a group health plan sponsor as the company transitions toward a self-funded insurance model. This role is an opportunity to build privacy and AI governance infrastructure at a company in a genuine market moment, where FedRAMP authorization, ISO 42001 certification, and a growing federal customer base make compliance a strategic differentiator, not a back-office function. What you'll do * Own the end-to-end DPA review, redline, and execution process - with authority to approve standard customer DPAs without escalation * Manage data subject rights (DSR) intake, response, and tracking across GDPR, CCPA, and applicable US state privacy laws * Conduct Privacy Impact Assessments (PIAs) for new product features, integrations, and data processing activities * Maintain and update the subprocessor register and manage vendor subprocessor compliance notifications * Lead cookie consent management implementation in partnership with Product and Engineering * Own privacy policy maintenance, including coordinating updates with Marketing and ensuring accurate web publication * Manage Vasion's EU-US Data Privacy Framework compliance obligations * Support international privacy obligations across Vasion's Germany, UK, and Australia entities * Lead data mapping and privacy GRC tool deployment (active evaluation in progress) * Deliver GDPR and privacy training to internal teams AI Governance Program Execution * Maintain Vasion's AI model inventory, bias testing documentation, and audit trail records * Draft and maintain the Responsible AI Use Policy and supporting internal guidance * Support ongoing ISO 42001 certification maintenance and internal audit readiness * Monitor EU AI Act and US state-level AI legislation and assess applicability to Vasion's product and operations * Provide operational support to the AI Governance Committee, coordinating with the CIO and cross-functional members * Conduct AI vendor risk assessments in partnership with Security and Procurement Policy Development and Training * Own the compliance policy library - drafting, maintaining, versioning, and publishing policies across domains * Design and deliver privacy and AI governance training programs for internal teams * Develop plain-language compliance guidance for Engineering, Marketing, Sales, and HR * Support Sales with privacy and AI compliance questionnaire responses and Trust Center content HIPAA Group Health Plan Support * Support... For full info follow application link.