Posted Oct 1
AI Compliance Jobs
AI compliance and risk roles turn emerging AI regulation, like the EU AI Act, into concrete controls, documentation, and audit trails - assessing model risk, running assurance reviews, and making sure AI systems meet the obligations that apply to them before and after deployment.
AI Compliance roles are rare: 4 live right now. Get the new ones every Monday.
Get new AI Compliance jobs in your inbox
Join 100+ AI professionals · Weekly, free, unsubscribe anytime
Latest AI Compliance roles
Provider and deployer obligations
The first question in AI compliance work is whether your employer is a provider or a deployer. Under the EU AI Act a provider develops an AI system or a general-purpose model and places it on the market, while a deployer uses one under its own authority. Providers of high-risk systems carry the heavier load, covering risk management, data governance, technical documentation, logging, and conformity assessment, while deployers carry a narrower set of duties around human oversight, monitoring, and use as intended. Many companies are both, for different systems.
ISO/IEC 42001 is the anchor most programs build on, because it is certifiable. It defines an AI management system in the same structure as ISO 27001, so an accredited body can audit it and issue a certificate that a customer can be shown. That makes it the practical spine of a program, with the NIST AI Risk Management Framework supplying vocabulary and structure, and the EU AI Act supplying the legal obligations that get mapped onto the same set of controls.
This is the most transferable role in AI hiring. Privacy professionals already run data protection impact assessments. Model risk management staff in banking have supervised model validation and documentation for years under existing supervisory guidance. Management-system auditors already know how to run an ISO-style program end to end. Each of those maps onto AI compliance with a subject-matter refresh rather than a career restart, which is why postings often list a privacy or audit credential alongside AI-specific experience.
Explore related searches
- Browse the AI Governance hub for the full specialization.
- Prefer remote? See remote AI jobs.
- AI Policy jobs
Frequently asked questions
- How many AI Compliance roles are open right now?
- We are tracking 4 live AI Compliance roles across the AI companies we monitor, updated hourly. Each listing links straight to the employer's own application page.
- Which AI regulations and standards do compliance roles work to?
- The EU AI Act is the main binding regime, and it reaches non-EU companies whose systems are placed on the EU market or whose output is used there. Alongside it, postings reference ISO/IEC 42001 for certification, the NIST AI Risk Management Framework as a structuring reference, sector rules such as banking model risk supervision, and existing privacy law wherever AI processes personal data.
- Can privacy or audit professionals move into AI compliance?
- Yes, and it is one of the most common entry paths. Impact assessments, records of processing, vendor due diligence, evidence collection, and management-system auditing all transfer directly. The new material is model-specific: training data provenance, evaluation results used as evidence, post-market monitoring, and the classification exercise that decides which obligations apply to which system.
- What is the difference between a provider and a deployer under the EU AI Act?
- A provider develops an AI system or general-purpose AI model and places it on the EU market under its own name or trademark. A deployer uses such a system under its own authority in a professional context. Providers of high-risk systems carry most of the obligations, and a deployer that substantially modifies a high-risk system, or puts its own name on it, can itself become a provider.