Compliance & Data Governance Analyst (Part-Time)

Acres is a land intelligence platform that analyzes U.S. land parcels to support data-driven decisions across real estate, corporate, agriculture, and finance. The Compliance & Data Governance Analyst will support the privacy and AI governance program by translating regulations into guidance, managing privacy operations, assessing vendor and data risks, and building compliance processes and tools.

What you'll do:

• Translate complex legal and regulatory requirements into clear, actionable guidance for business stakeholders
• Monitor developments in state privacy laws, AI regulation, and enforcement trends
• Proactively identify risks and map them to targeted mitigation strategies
• Maintain the company's internal policy framework, including the acceptable use policy, model whitelist/blacklist, and incident response plan, et al
• Partner cross-functionally with marketing, engineering, product, and sales
• Conduct vendor risk assessments and data privacy audits
• Prepare research memos and compliance summaries for internal stakeholders
• Track and apply regulatory requirements. Monitor privacy and AI regulations across jurisdictions, assess how and when they apply to Acres, and recommend updates to our policies, terms, and practices as the business grows
• Privacy operations. Build and run the processes that handle privacy obligations day to day, including data subject requests, and train teams across the company to execute them consistently, timely, and compliantly
• Manage contract and vendor compliance. Review vendor terms, data processing agreements, and security posture; maintain visibility into key terms and obligations across our agreements, using AI tooling to make contracts searchable and reportable
• Built compliance solutions. Stand up trackers, dashboards, and workflows that make compliance measurable instead of ad hoc
• Operationalize privacy for the whole company. Create internal processes, checklists, and plain-English guidance that let non-legal teams handle data responsibly, and keep our policy library current as the business evolves

What they're looking for:

• Current graduate student (JD, LL.M., MIS, business analytics, MBA, or similar), upper-level undergraduate (MIS, data science, business, computer science, or similar), or 1–2 years of professional experience in compliance, privacy, risk, audit, or operations
• Experience in privacy, regulatory compliance, or risk management; coursework or IAPP study a plus
• Strong research and writing skills: you can turn dense source material into clear, actionable guidance and effective training
• Comfort with data and systems: spreadsheets at minimum; AI tools, data mapping, or analytics coursework is a plus
• An operator's mindset: you build processes, close loops, and work independently when the path isn't fully defined
• * Current graduate student (JD, LL.M., MIS, business analytics, MBA, or similar), upper-level undergraduate (MIS, data science, business, computer science, or similar), or 1–2 years of professional experience in compliance, privacy, risk, audit, or operations
• * Experience in privacy, regulatory compliance, or risk management; coursework or IAPP study a plus
• * Strong research and writing skills: you can turn dense source material into clear, actionable guidance and effective training
• * Comfort with data and systems: spreadsheets at minimum; AI tools, data mapping, or analytics coursework is a plus
• * An operator's mindset: you build processes, close loops, and work independently when the path isn't fully defined
• * Coursework or experience in privacy (e.g., GDPR, CCPA/state privacy laws), cybersecurity, or AI governance
• * Familiarity with vendor risk assessment, DPAs, SOC 2 Type II

Benefits:

• Opportunities to learn a lot and gain exposure to many facets of the business.
• Work on impactful initiatives that affect business outcomes.
• Work with a state-of-the-art platform and powerful technology.
• Create tools that make people smarter and reinvent how relevant data is discovered, created, and shared.