Data Privacy and AI Governance Manager

• Develop, implement, and maintain the organization’s data privacy program including an AI governance framework including policies, procedures, and controls
• Ensure compliance with applicable data privacy and AI laws and regulations.
• Partners with business, legal, and technology teams to manage privacy risks, support data governance initiatives, and embed privacy-by-design principles across the organization.
• Partner closely with Technology, AI and Governance, Risk and Compliance teams to ensure internal controls are in place and effective for AI usage and personal data processing, align enterprise data standards with regulatory and compliance requirements, and support policy development and guidelines on data handling and responsible AI use.
• Establish continuous discovery mechanisms to identify, map, assess, and mitigate “Shadow AI” tools and use cases deployed without authorization.
• Integrate AI governance and privacy requirements into product development, procurement, and implementation and ensure data and information governance aligns, enables and supports the adoption of AI tools and technologies.
• Oversee governance for agentic AI and autonomous workflows, including human-in-the-loop protocols and manual override requirements.
• Lead, facilitate and work with AI Governance Committee to define governance process, risk tiers and approval pathways based on materiality, impact, and regulatory exposure.
• Assist in developing and delivering training programs and communications to promote a culture of responsible AI use across the organization.
• Report on program status, risk metrics, and compliance issues to senior leadership and relevant stakeholders.
• Stay up-to-date on emerging AI regulations (e.g., AI Act) and data privacy laws.

• Education & Experience: Bachelor’s degree in a relevant field (e.g., Computer Science, Data Science, Law, Information Systems, or similar). 5+ years of experience in data privacy, compliance, or risk management roles, or equivalent experience implementing technology governance or privacy programs including experience in leading AI governance.
• Regulatory Knowledge: Strong knowledge of data protection regulations (such as GDPR, CCPA, etc.) and familiarity with newer AI governance frameworks such as the EU AI Act risk tiers, NIST AI RMF, and ISO/IEC 42001.
• AI/ML Familiarity: Understanding of artificial intelligence and machine learning concepts and their risks, including data provenance, explainability limits, model drift, algorithmic bias audits, and guardrails against prompt injection and training data leakage (deep technical expertise is not required, but must be comfortable collaborating with technical teams).
• AI Evaluations Familiarity: Familiarity with AI evaluation frameworks and methodologies, and experience designing or conducting AI evaluations.
• Policy & Program Management: Proven ability to develop and enforce policies or governance frameworks. Experience conducting risk assessments or audits regarding technology or data initiatives. Strong project management skills to drive governance programs.
• Collaboration & Communication: Excellent communication and interpersonal skills. Ability to work cross-functionally and influence stakeholders at all levels. Capable of translating complex technical or regulatory information into clear, actionable guidance for business teams.
• Leadership & Ethics: Demonstrated commitment to ethical technology use and protecting privacy. Experience leading or coordinating cross-departmental initiatives or committees. Strong analytical decision-making and problem-solving capabilities.

Preferred Qualifications (Nice to Have):

• Advanced degree in Law, Business, Data Science, or related field, or certifications in privacy or risk management (e.g., CIPM, CIPT, CIPP, or similar).
• Experience implementing AI governance frameworks or privacy compliance programs within a complex organization, especially in regulated industries (finance, healthcare, etc.).
• Experience using AI GRC automation tools such as OneTrust or Credo AI.
• Experience engaging with regulators, auditors, or industry consortia on compliance or AI governance topics.

This Data Privacy and AI Governance Manager role offers the opportunity to shape how our company innovates responsibly. If you are passionate about trustworthy AI and data protection and have the expertise to bridge technology with compliance, we encourage you to apply.

At CohnReznick, we’re united by a common mission to create opportunity, value, and trust for our clients, our people, and our communities. Whether it’s working alongside your peers to solve a client challenge, or volunteering together at the local food bank, there are so many ways to find your “why” at the firm.

We believe it’s important to balance work with everyday life - and make time for enjoyment and fun. We invest in a robust Total Rewards package that includes everything from generous PTO, a flexible work environment, expanded parental leave, extensive learning & development, and even paid time off for employees to volunteer.

As CohnReznick grows, so do our career opportunities. As one of the nation’s top professional services firms, CohnReznick creates rewarding careers in advisory, assurance, and tax with team members who value innovation and collaboration in everything they do!

CohnReznick helps organizations optimize performance, manage risk, and maximize value through CohnReznick LLP (assurance services) and CohnReznick Advisory LLC (advisory and tax services). Together, the firm provides leaders with deep industry knowledge and relationships, solutions to address clients’ unique business goals and risks, and insight on how emerging market forces can drive opportunity. With offices nationwide, the firm serves organizations around the world as an independent member of Nexia., “CohnReznick” is the brand name under which CohnReznick LLP and CohnReznick Advisory LLC and their respective subsidiaries provide professional services. CohnReznick LLP and CohnReznick Advisory LLC (and their respective subsidiaries) practice in an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations, and professional standards. CohnReznick LLP is a licensed CPA firm that provides attest services to its clients. CohnReznick Advisory LLC provides tax and business consulting services to its clients. CohnReznick Advisory LLC and its subsidiaries are not licensed CPA firms.