About Newo.ai
Newo.ai is a cloud-based AI platform that enables businesses to create human-like AI employees that manage customer communications across phone, SMS, email, web chat, and social media. Using data from a company’s website and Google Business profile, Newo can automatically generate AI agents in minutes, helping organizations automate operations, handle unlimited interactions 24/7, improve efficiency, and drive revenue growth.
About the Role
You will own all areas of compliance at Newo.ai — AI governance, data privacy, and information security — across every jurisdiction we operate in, with a primary focus on HIPAA (US healthcare) and GDPR (EMEA). This is a single-threaded ownership role: you'll be the person who knows the state of our compliance posture at any moment, drives it forward, and represents it to customers, partners, auditors, and regulators.
You'll partner closely with Engineering, Legal, and Sales. This is a builder's role in a fast-moving company — equal parts program strategy and hands-on execution.
Location:
Remote (Eastern Time Zone only)
What You’ll Do 🚀
Information Security & Certifications
Own and mature the ISO/IEC 27001 ISMS
Lead risk assessments and maintain the Statement of Applicability
Manage internal audits and management reviews
Drive SOC 2 compliance from Type 1 to Type 2
Manage evidence collection and auditor relationships
Map controls across ISO 27001, SOC 2, HIPAA, and GDPR
Healthcare / HIPAA
Own and manage Newo.ai’s HIPAA compliance program
Manage Business Associate Agreements (BAAs)
Maintain the PHI sub-processor register
Own breach notification procedures and PHI safeguards
Enforce human-in-the-loop requirements for PHI
Maintain minimum-necessary principles for PHI
Data Privacy (GDPR & Global)
Operate Newo.ai’s GDPR program alongside the DPO
Maintain Records of Processing Activities (ROPA)
Conduct legitimate-interest and DPIA assessments
Manage data-subject requests
Maintain cross-border data transfer mechanisms
Monitor evolving U.S. and EMEA privacy laws
Maintain compliance with CCPA, CPRA, and state privacy laws
AI Governance
Own Newo.ai’s responsible AI compliance program
Drive alignment with the EU AI Act
Support alignment with emerging U.S. AI frameworks
Incorporate the NIST AI RMF
Manage AI model and vendor risk
Oversee AI transparency and disclosure requirements
Establish appropriate human oversight for AI systems
Third-Party & Vendor Risk
Lead security and compliance due diligence
Manage the full sub-processor lifecycle
Maintain contractual protections for third parties
Assess vendors handling customer or personal data
Customer & Partner Assurance
Serve as the compliance point of contact
Manage security questionnaires and trust reviews
Coordinate customer and partner audits
Support sales through compliance and security assurance
Awareness & Culture
Own the policy lifecycle and document control
Manage security awareness and compliance training
Maintain incident-response readiness
Partner with Security on compliance initiatives
What We’re Looking For ✨
6+ years of compliance, security, privacy, or GRC experience
Hands-on ownership of a certification or attestation program
Deep practical knowledge of HIPAA and GDPR
Working knowledge of ISO/IEC 27001 and SOC 2
Experience with U.S. and EMEA compliance requirements
Ability to translate regulations into operational controls
Ability to translate regulations into engineering controls
Strong communication with auditors and customers
Strong communication with executives and stakeholders
Strong compliance program management skills
Experience managing audits and closing findings
Experience maintaining audit evidence
Comfortable working in a fast-paced startup environment
Ability to build pragmatic, right-sized compliance programs
Nice to Have
Familiarity with AI/ML governance
Knowledge of emerging AI regulations
Knowledge of the EU AI Act and NIST AI RMF
Experience with SaaS or communications platforms
Experience supporting regulated industries
Healthcare compliance experience
CIPP/E, CIPP/US, CIPM, CISSP, or CISA certification
ISO 27001 Lead Auditor or Implementer certification
• Experience supporting white-label or partner channels The salary range for this role is
$150,000–$180,000
, with final compensation determined based on relevant experience, skills and qualifications, geographic location, and other job-related considerations.
🌈
Equal Opportunity Employer
At Newo.ai, we value diversity and celebrate all types of skills, backgrounds, and experiences. We’re dedicated to fostering an inclusive environment and providing reasonable accommodations throughout our recruitment process.
If you need any accommodations or support during the application or interview process, please reach out to us directly.