System Compliance and Governance Manager

About the role:

The System Compliance and Governance Manager role will play a critical role in supporting the Corporate Digital Transformation team - within the IT organization - to enable strategic tech initiatives. This role will be responsible for establishing and maintaining robust governance frameworks that ensure that AI, digital adoption, knowledge management, Atlassian and other R&D-relevant systems and processes are implemented, used, and maintained in compliance with internal policies, relevant industry standards, and regulatory requirements.

This is an individual contributor role reporting to our Director, Digital Workplace Strategy and Delivery Excellence.

What you’ll do (responsibilities):

Governance Frameworks Development and Implementation: 

• Develop governance frameworks for IT systems, such as AI, Digital Adoption Platforms (DAPs), Atlassian/Jira, including roles, responsibilities, and escalation processes.
• Define, document and lead the adoption of clear policies and procedures for system usage such that implemented use cases/capabilities are maintained in alignment with such policies.
• Design metrics and KPIs to track compliance around system usage, adherence to approved integration patterns and architecture principles, as well as ethical use (e.g., for AI use cases).
• Perform assessments against enterprise standards. 

System Compliance Management

• Monitor and audit IT systems to ensure adherence to usage agreements, governance policies and enterprise standards. 
• Monitor and analyze data usage patterns to identify trends and potential risks.

• Collaborate with IT teams to address compliance gaps, implement corrective actions, and improve governance processes.

AI/ML Governance:

• Partner with IT, GRC, Security and Legal teams to develop and implement governance frameworks for the ethical and responsible use of AI/ML technologies.
• Monitor AI model usage and outputs to ensure compliance with IT and organizational standards.
• Audit datasets used for AI training to avoid bias and ensure ethical standards.
• Document AI/ML system activities (e.g., data sets, models, training processes, and decisions) to support audits and compliance reviews.

Knowledge Management & Sharing:

• Establish and maintain a centralized knowledge base for system documentation, best practices, compliance guidelines, governance frameworks, and training materials.
• Integrate compliance, governance, and usage guidelines into DAP workflows for contextual, real-time learning.

Vendor and Third-Party Management

• Partner with the Strategy and Architecture, GRC and Legal teams to evaluate compliance and governance impacts when integrating AI or DAPs with existing enterprise systems.

Stakeholder Management:

• Build and maintain strong relationships with key stakeholders across the organization, including R&D leadership, IT, legal, and compliance.
• Communicate effectively with stakeholders on compliance issues and best practices.
• Facilitate collaboration between technical teams and business units to ensure AI and DAP policies are understood and adopted effectively.

Training and Adoption

• Train employees on compliant and ethical use of AI and DAPs, ensuring systems are used effectively and responsibly.

Continuous Improvement:

• Continuously monitor and evaluate the effectiveness of governance frameworks and make necessary adjustments.
• Analyze data on employee/user behavior in core systems and adoption of key business processes. Partner with teams such as Strategy and Architecture to bake these findings into future state architecture and processes.
• Stay abreast of emerging technologies, industry best practices, and regulatory changes.

Deliverables from the Role

These may include, but are not limited to:

• System Governance Policies and Frameworks: A living document of compliance and governance best practices that evolves with organizational needs.
• Compliance Reports such as regular reports on AI and DAP compliance status and risks.
• Training Programs and knowledge-sharing resources for stakeholders.
• Dynamic, user-friendly knowledge base accessible through DAPs and KM systems.
• Video tutorials, compliance playbooks, and use-case demonstrations integrated into DAPs.

What you’ll need (basic qualifications):

• 4+ years of experience in IT governance, compliance, or risk management roles.
• Good understanding of data privacy regulations (e.g., GDPR, CCPA) and security best practices (e.g., ISO 27001).
• Experience with IT governance frameworks and tools.
• Familiarity with AI/ML technologies (implementation) and their potential risks and ethical considerations.
• Familiarity with Digital Adoption Platforms (DAP).
• Strong analytical and problem-solving skills, with the ability to work across IT and business teams.
• Excellent communication, interpersonal, and presentation skills.
• Ability to work a) independently, and b) as part of a team. 
• Strong project management and organizational skills.

HashiCorp welcomes all qualified candidates who have authorization to work in the United States to apply - HashiCorp will not be sponsoring visas for this role at this time. 

#LI-Remote