Compliance & Data Governance Analyst (Part-Time)

The Role
We're looking for a compliance intern to support our privacy and AI governance program under the supervision of the Chief of Staff. This is a hands-on opportunity to build practical skills in data privacy, AI governance, and SaaS commercial compliance at a growth-stage technology company. 

Responsibilities

• Translate complex legal and regulatory requirements into clear, actionable guidance for business stakeholders
• Monitor developments in state privacy laws, AI regulation, and enforcement trends
• Proactively identify risks and map them to targeted mitigation strategies
• Maintain the company's internal policy framework, including the acceptable use policy, model whitelist/blacklist, and incident response plan, et al. 
• Partner cross-functionally with marketing, engineering, product, and sales
• Conduct vendor risk assessments and data privacy audits
• Prepare research memos and compliance summaries for internal stakeholders
• Track and apply regulatory requirements. Monitor privacy and AI regulations across jurisdictions, assess how and when they apply to Acres, and recommend updates to our policies, terms, and practices as the business grows.
• Privacy operations. Build and run the processes that handle privacy obligations day to day, including data subject requests, and train teams across the company to execute them consistently, timely, and compliantly.
• Manage contract and vendor compliance. Review vendor terms, data processing agreements, and security posture; maintain visibility into key terms and obligations across our agreements, using AI tooling to make contracts searchable and reportable.
• Built compliance solutions. Stand up trackers, dashboards, and workflows that make compliance measurable instead of ad hoc.
• Operationalize privacy for the whole company. Create internal processes, checklists, and plain-English guidance that let non-legal teams handle data responsibly, and keep our policy library current as the business evolves.

Need to have

• Current graduate student (JD, LL.M., MIS, business analytics, MBA, or similar), upper-level undergraduate (MIS, data science, business, computer science, or similar), or 1–2 years of professional experience in compliance, privacy, risk, audit, or operations.
• Experience in privacy, regulatory compliance, or risk management; coursework or IAPP study a plus
• Strong research and writing skills: you can turn dense source material into clear, actionable guidance and effective training.
• Comfort with data and systems: spreadsheets at minimum; AI tools, data mapping, or analytics coursework is a plus. 
• An operator's mindset: you build processes, close loops, and work independently when the path isn't fully defined.

Nice to have

• Coursework or experience in privacy (e.g., GDPR, CCPA/state privacy laws), cybersecurity, or AI governance.
• Familiarity with vendor risk assessment, DPAs, SOC 2 Type II.
• Experience using AI tools (Claude, ChatGPT, etc.) for document review or workflow automation
• Interest in real estate, agriculture, or geospatial data