This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We’re looking for a legally grounded, detail-oriented Privacy & AI Compliance Specialist to join our Legal team. This role is designed for a hands-on subject matter expert who enjoys applying privacy and AI compliance requirements in real-world, product-driven environments. You’ll work closely with internal stakeholders to ensure Bloomreach’s products, vendor relationships, and internal processes meet applicable privacy and AI regulatory obligations—while remaining practical, scalable, and business-aligned.
Job Responsibility:
Embed privacy into product development
Partner with product and engineering teams to assess new features and roadmaps for privacy and AI-related risk
Support privacy-by-design and responsible AI principles from ideation through launch
Advise on global privacy and AI compliance
Provide practical guidance on GDPR, UK GDPR, CCPA, and other global data protection frameworks
Support compliance with emerging AI regulations, including the EU AI Act and evolving U.S. AI laws
Oversee vendors and third parties
Conduct privacy and AI compliance assessments for vendors, particularly those handling sensitive data or AI-driven systems
Identify risks, recommend mitigation strategies, and support accountability across third-party relationships
Support audits and governance programs
Maintain data maps and Records of Processing Activities (RoPAs) using data mapping tools
Assist with internal and external audits, including documentation, evidence collection, and audit readiness
Support privacy incident response and ongoing governance initiatives
Support data subject rights and requests
Assist with intake, assessment, and response to data subject requests (e.g., access, deletion, objection) in accordance with GDPR and other applicable privacy laws
Coordinate with internal stakeholders to ensure accurate, timely, and compliant responses
Monitor regulatory developments
Stay current on changes in privacy and AI regulations and enforcement trends
Assess impacts on Bloomreach products and operations and communicate actionable recommendations to stakeholders
Collaborate cross-functionally
Work closely with legal, compliance, security, product, marketing, and engineering teams
Translate complex legal and technical requirements into pragmatic, business-aligned solutions
Requirements:
3+ years of experience in privacy, data protection, or compliance roles, ideally within a SaaS, technology, or product-focused organization
Strong working knowledge of EU data protection laws, including GDPR and UK GDPR
familiarity with global privacy frameworks such as CCPA is a plus
Familiarity with the EU AI Act or other emerging AI regulatory frameworks
Ability to interpret regulatory requirements and translate them into clear, actionable guidance for business and technical teams
Strong analytical and organizational skills, with a pragmatic, risk-based approach to compliance
Clear and precise written and verbal communication skills, comfortable engaging with both legal and non-legal stakeholders
Experience working cross-functionally in fast-paced, international environments
Nice to have:
Practical experience supporting AI governance, algorithmic risk assessments, or responsible AI initiatives
Experience using privacy management or data mapping tools (e.g., RoPA maintenance)
Experience supporting privacy, compliance, or security audits
Relevant certifications such as CIPP/E, CIPM, or other IAPP credentials
What we offer:
Learning budgets
Professional development programs
A strong coaching culture
Freedom with responsibility
Inclusive and flexible culture
Work remotely with Bloomreach hubs around the world
Culture that prioritizes well-being and personal growth
Flexible working hours
Work virtual-first
Company events
5 paid days off to volunteer
People Development Program
Communication coach
Leader Development Program
$1,500 professional education budget annually
Employee Assistance Program with counselors
Subscription to Calm app
‘DisConnect’ days with additional day off each quarter
Facilitated sports, yoga, and meditation opportunities
Extended parental leave up to 26 calendar weeks for Primary Caregivers