Senior Compliance Manager

About Newo.ai

Newo.ai is a cloud-based AI platform that enables businesses to create human-like AI employees that manage customer communications across phone, SMS, email, web chat, and social media. Using data from a company’s website and Google Business profile, Newo can automatically generate AI agents in minutes, helping organizations automate operations, handle unlimited interactions 24/7, improve efficiency, and drive revenue growth.

About the Role

You will own all areas of compliance at Newo.ai — AI governance, data privacy, and information security — across every jurisdiction we operate in, with a primary focus on HIPAA (US healthcare) and GDPR (EMEA). This is a single-threaded ownership role: you'll be the person who knows the state of our compliance posture at any moment, drives it forward, and represents it to customers, partners, auditors, and regulators.

You'll partner closely with Engineering, Legal, and Sales. This is a builder's role in a fast-moving company — equal parts program strategy and hands-on execution.

Location: Remote (Eastern Time Zone only)

What You’ll Do

Information Security & Certifications

• Own and mature the ISO/IEC 27001 ISMS

• Lead risk assessments and maintain the Statement of Applicability

• Manage internal audits and management reviews

• Drive SOC 2 compliance from Type 1 to Type 2

• Manage evidence collection and auditor relationships

• Map controls across ISO 27001, SOC 2, HIPAA, and GDPR

Healthcare / HIPAA

• Own and manage Newo.ai’s HIPAA compliance program

• Manage Business Associate Agreements (BAAs)

• Maintain the PHI sub-processor register

• Own breach notification procedures and PHI safeguards

• Enforce human-in-the-loop requirements for PHI

• Maintain minimum-necessary principles for PHI

Data Privacy (GDPR & Global)

• Operate Newo.ai’s GDPR program alongside the DPO

• Maintain Records of Processing Activities (ROPA)

• Conduct legitimate-interest and DPIA assessments

• Manage data-subject requests

• Maintain cross-border data transfer mechanisms

• Monitor evolving U.S. and EMEA privacy laws

• Maintain compliance with CCPA, CPRA, and state privacy laws

AI Governance

• Own Newo.ai’s responsible AI compliance program

• Drive alignment with the EU AI Act

• Support alignment with emerging U.S. AI frameworks

• Incorporate the NIST AI RMF

• Manage AI model and vendor risk

• Oversee AI transparency and disclosure requirements

• Establish appropriate human oversight for AI systems

Third-Party & Vendor Risk

• Lead security and compliance due diligence

• Manage the full sub-processor lifecycle

• Maintain contractual protections for third parties

• Assess vendors handling customer or personal data

Customer & Partner Assurance

• Serve as the compliance point of contact

• Manage security questionnaires and trust reviews

• Coordinate customer and partner audits

• Support sales through compliance and security assurance

Awareness & Culture

• Own the policy lifecycle and document control

• Manage security awareness and compliance training

• Maintain incident-response readiness

• Partner with Security on compliance initiatives

What We’re Looking For ✨

• 6+ years of compliance, security, privacy, or GRC experience

• Hands-on ownership of a certification or attestation program

• Deep practical knowledge of HIPAA and GDPR

• Working knowledge of ISO/IEC 27001 and SOC 2

• Experience with U.S. and EMEA compliance requirements

• Ability to translate regulations into operational controls

• Ability to translate regulations into engineering controls

• Strong communication with auditors and customers

• Strong communication with executives and stakeholders

• Strong compliance program management skills

• Experience managing audits and closing findings

• Experience maintaining audit evidence

• Comfortable working in a fast-paced startup environment

• Ability to build pragmatic, right-sized compliance programs

Nice to Have

• Familiarity with AI/ML governance

• Knowledge of emerging AI regulations

• Knowledge of the EU AI Act and NIST AI RMF

• Experience with SaaS or communications platforms

• Experience supporting regulated industries

• Healthcare compliance experience

• CIPP/E, CIPP/US, CIPM, CISSP, or CISA certification

• ISO 27001 Lead Auditor or Implementer certification

• Experience supporting white-label or partner channels

The salary range for this role is $150,000–$180,000 , with final compensation determined based on relevant experience, skills and qualifications, geographic location, and other job-related considerations.

Equal Opportunity Employer

At Newo.ai, we value diversity and celebrate all types of skills, backgrounds, and experiences. We’re dedicated to fostering an inclusive environment and providing reasonable accommodations throughout our recruitment process.

If you need any accommodations or support during the application or interview process, please reach out to us directly.