Description

You will embed privacy into product development, advise on global privacy and AI compliance (including GDPR and EU AI Act), oversee vendor assessments, support audits and governance programs, and handle data subject rights requests. Your work will ensure Bloomreach's agentic personalization platform meets regulatory obligations while remaining business-aligned.

Requirements

• 3+ years of experience in privacy, data protection, or compliance
• Subject matter expertise in applying privacy and AI compliance in product-driven environments
• Knowledge of global data protection frameworks (GDPR, UK GDPR, CCPA) and emerging AI regulations
• Ability to translate complex legal and technical requirements into pragmatic solutions
• Experience with vendor privacy assessments and data mapping tools
• Strong cross-functional collaboration skills with legal, engineering, product, and security teams

Responsibilities

• Embed privacy into product development, assessing features for privacy and AI-related risk
• Support privacy-by-design and responsible AI principles from ideation through launch
• Provide practical guidance on GDPR, UK GDPR, CCPA, and emerging AI regulations (EU AI Act, U.S. AI laws)
• Conduct privacy and AI compliance assessments for vendors, especially those handling sensitive data or AI-driven systems
• Support data subject rights requests (access, deletion, objection) and coordinate with internal stakeholders
• Maintain data maps and Records of Processing Activities (RoPAs), assist with audits and incident response