AI Governance & Privacy Engineer (EU AI Act & Product Strategy) C4

Are you an AI compliance expert or privacy engineer who is tired of manual audits and wants to help automate enterprise security? We are building DataCastle—an autonomous AI compliance, data governance, and automated remediation platform. With the EU AI Act taking effect and GDPR enforcement stricter than ever, enterprise engineering teams are drowning in compliance bottlenecks. DataCastle uses autonomous agents to detect drift, mask PII, and generate instant, deployable SQL fixes using a Zero-Data Privacy architecture. We are looking for a fractional AI Governance & Privacy Engineer to serve as our internal Subject Matter Expert. You will not be managing our internal company compliance; instead, you will work directly alongside the development team to stress-test our AI agents, validate our automated remediation logic, and ensure the platform delivers bulletproof conformity assessments for our enterprise clients. Key Responsibilities

• Stress-Test EU AI Act Agents: Run complex, real-world enterprise scenarios through our EU AI Act Specialist agents to ensure they accurately classify risk tiers and identify Article 5/6 prohibited use cases.
• Validate Autonomous Remediation: Review the "Agentic SQL" and infrastructure fixes suggested by our platform to ensure they meet strict DevSecOps and legal standards before they are pushed to production.
• Refine GDPR Auto-Shield Workflows: Guide the product development of our PII discovery and masking tools, ensuring our Zero-Data Privacy approach (analyzing only metadata) aligns perfectly with enterprise data protection demands.
• Shape the Product Roadmap: Act as our internal "power user," delivering asynchronous feedback on our Continuous Auditing dashboards, identifying feature gaps, and defining the exact reporting formats CISOs and DPOs need.

Qualifications & Experience

• Deep Privacy Domain Expertise: Extensive knowledge of the EU AI Act risk classifications, GDPR regulations, and enterprise data governance frameworks.
• Technical Literacy: You don’t need to be a software engineer, but you must be comfortable reading technical documentation, understanding database schemas, and discussing DevSecOps workflows.
• Experience Translating Law to Code: Proven ability to take abstract legal or compliance requirements and translate them into logical, rule-based systems or product features.
• Startup & Remote Ready: Highly autonomous, comfortable working asynchronously in a fast-paced environment, and able to provide clear, actionable product feedback.

Before You Apply — Explore DataCastle We are looking for candidates who are genuinely excited about the intersection of AI, law, and automated engineering. 👉 Visit datacastle.eu to explore the platform. Take a look through the features and our approach to autonomous compliance. When we reach out, we will want to know your first impressions of the tool and how you see it solving real-world bottlenecks. How to Apply Submit your profile/resume directly here on LinkedIn. In your application note, briefly mention one specific compliance bottleneck you’ve seen in enterprise AI deployment, and how you believe a platform like DataCastle could automate or solve it.