Execute and support the end-to-end data and AI governance lifecycles, including intake, triage, risk classification, assessment, control validation, and ongoing monitoring of AI-enabled systems.
Perform AI risk and compliance assessments aligned to all applicable global regulations and frameworks, including the EU AI Act, NIST AI RMF, ISO/IEC standards, and internal Boeing policies.
Partner with engineering, data, cybersecurity, legal, and product teams to embed data and AI governance controls, documentation, and review checkpoints into system development and deployment workflows.
Support development and maintenance of AI governance artifacts, including risk registers, inventories, assessment outputs, documentation standards, and evidence required for audit and regulatory readiness.
Assist with the operationalization of AI governance tooling and workflows, including assessment logic, workflow automation, and reporting.
Lead and execute Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), and related global privacy risk assessments across Boeing business units.
Apply privacy-by-design and privacy-by-default principles to products, systems, and processes involving personal data, AI, and advanced analytics.
Assess data flows, processing purposes, data minimization practices, retention, security controls, and cross-border data transfers to identify and mitigate privacy risk.
Translate complex global privacy laws and regulatory requirements into clear, actionable controls and assessment guidance for business and technical teams.
Interpret and operationalize global privacy and AI regulatory requirements, including GDPR, CCPA, emerging AI regulations, and sector-specific obligations.

Requirements

10+ years of experience in privacy, data protection, compliance, risk management, AI governance, or a related field.
At least one advanced certification in Privacy, including IAPP certification(s) (e.g., CIPP/E, CIPP/US, CIPM).
Experience working with AI governance, privacy management, or GRC tooling platforms, including OneTrust, BigID, and ServiceNow.
Demonstrated, hands-on experience conducting PIAs, DPIAs, and global privacy assessments in complex, regulated environments.
Practical experience supporting or executing AI governance, AI risk assessments, or technology risk management activities.
Strong understanding of global privacy laws and regulations (e.g., GDPR) and emerging AI regulatory frameworks.
Proven ability to translate legal, regulatory, and policy requirements into operational controls, assessment logic, and actionable guidance.
Excellent written and verbal communication skills, with the ability to clearly articulate risk, mitigations, and compliance expectations to diverse audiences.
Ability to work independently, manage multiple competing priorities simultaneously, and exercise sound judgment using a risk-based approach.
Ability to travel up to 10%-15% of the time.

Benefits

Health insurance
Flexible spending accounts
Health savings accounts
Retirement savings plans
Life and disability insurance programs
Paid and unpaid time away from work

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AI governancerisk managementcompliance assessmentsprivacy impact assessmentsdata protection impact assessmentsdata minimization practicessecurity controlsworkflow automationassessment logicregulatory readiness

Soft Skills

communication skillsindependent workjudgmentprioritizationarticulation of riskcollaborationproblem-solvingattention to detailanalytical thinkingadaptability

Certifications

CIPP/ECIPP/USCIPM