AI Compliance Lead at Tricentis · Trevo

Job description

About the role

Location: Vienna, Austria Hybrid (in office 3 times per week) The AI Compliance Lead is responsible for supporting Tricentis’ compliance with evolving AI, privacy, and data protection laws and regulations. The role sits within the Legal / Privacy function and focuses on regulatory interpretation, compliance guidance, documentation, and readiness for AI-related obligations. As Tricentis expands its use of AI across internal operations, business workflows, third-party tools, and product-related initiatives, the AI Compliance Lead will help ensure that AI activities are assessed through a legal, privacy, and regulatory compliance lens. The role is intended to support existing IT, Security, Product, vendor management, GRC, and incident-response processes. This individual will serve as the Legal / Compliance representative for AI-related regulatory matters, including AI laws, privacy laws, responsible AI requirements, customer commitments, and applicable standards. The role will coordinate with Security, IT, and Product or Business stakeholders to identify applicable legal and compliance requirements, support appropriate documentation, and translate complex AI regulatory obligations into practical guidance. Tricentis is a global leader in continuous testing and quality engineering. The Tricentis AI-based, continuous testing portfolio of products provides a new and fundamentally different way to perform software testing — an approach that's totally automated, codeless, and intelligently driven by AI. It addresses both agile development and complex enterprise apps, enabling enterprises to accelerate their digital transformation by dramatically increasing software release speed, reducing costs, and improving software quality. Widely credited for reinventing software testing for DevOps, cloud, and enterprise applications, Tricentis has been recognised as a leader by all major industry analysts, including Forrester, Gartner, and IDC. We empower innovators to push the boundaries of software testing, fostering a global community of continuous learners who pioneer AI-powered, highly performant, highly secure end-to-end testing tools that accelerate our customers' time to market — including the largest brands in the world. Tricentis Core Values: Knowing what we need to achieve and how to achieve it is important. Tricentis core values define our ways of working and the behaviors we model that create an enjoyable and successful Tricentis life. Demonstrate Self-Awareness: Own your strengths and limitations. Finish What We Start: Do what we say we are going to do. Move Fast: Create momentum and efficiency. Run Towards Change: Challenge the status quo. Serve Our Customers & Communities: Create a positive experience with each interaction. Solve Problems Together: We win or lose as one team. Think Big & Believe: Set extraordinary goals and believe you can achieve them. We are under legal obligation in Austria to indicate the minimum salary, which is 45,738 EUR gross per year for this position according to the IT collective agreement. However, our attractive compensation packages follow current market salaries and can therefore be significantly above the indicated minimum salary. Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law. Global Sanctions Compliance We comply with all applicable global sanctions and export control laws. Candidates must not be listed on any government restricted party lists (including OFAC SDN List and U.S. Commerce Department restricted lists) and must certify that their employment would not violate any sanctions or export control regulations. Candidates must notify us of any changes to their status during the application process or subsequent employment.

What you'll do

Monitor and interpret emerging AI, privacy, data governance and protection laws, regulations, standards, and enforcement trends relevant to Tricentis.
Support compliance with applicable AI and data regulatory frameworks, including the EU AI Act, the EU Data Act, the EU Data Governance Act, and other global AI and data governance requirements.
Review AI clauses and contract templates for alignment with AI, privacy, data governance and protection, customer assurance, and regulatory requirements.
Develop and maintain privacy and AI compliance guidance, policies, procedures, and playbooks aligned with privacy, data protection, and AI regulatory obligations.
Act as the Legal / Privacy representative for AI-related regulatory, privacy, and responsible AI matters.
Advise on privacy and AI compliance requirements for AI use cases, including generative AI, agentic AI, machine learning, automated decision-support tools, and third-party AI solutions.
Advise on data access, data-sharing, and related data-economy and data-governance obligations under the EU Data Act, the EU Data Governance Act, and similar regulations.
Support AI-related legal and privacy assessments, including AI Act role classification, risk classification, impact assessments, privacy assessments, DPIAs, and regulatory risk assessments.
Coordinate with Security, IT, and Product or Business stakeholders to identify when AI initiatives require legal, privacy, or compliance review.
Help define legal and compliance review triggers, escalation criteria, and documentation expectations for AI initiatives.
Provide legal, privacy, and AI regulatory input into third-party AI tool and vendor reviews.
Support privacy-by-design and compliance-by-design analysis for AI initiatives in coordination with existing process owners.
Review AI-related documentation and support customer-facing AI compliance responses, due diligence requests, questionnaires, and assurance materials.
undefined
Prepare legal and compliance documentation to support AI regulatory readiness, audits, certifications, customer assurance, and external stakeholder engagement.
Advise on AI-specific legal, privacy, regulatory notification, and documentation requirements, and translate complex AI regulatory requirements into practical business guidance.
Skills / Experience:
Experience in AI compliance, privacy, data protection, data governance, technology compliance, regulatory compliance, responsible AI, or related legal/compliance roles.
Strong understanding of AI, privacy, and data regulatory frameworks, including the EU AI Act, the EU Data Act, the EU Data Governance Act, GDPR, ePrivacy, NIST AI Risk Management Framework, ISO/IEC AI standards, and related global developments.
Experience supporting DPIAs, privacy impact assessments, transfer impact assessments, legitimate interest assessments, records of processing, AI impact assessments, vendor reviews, or compliance risk assessments.
Familiarity with privacy-by-design, compliance-by-design, data minimization, automated decision-making, profiling, special category data, employee data, data retention, and data subject rights.
Familiarity with generative AI, agentic AI, machine learning, third-party AI tools, and enterprise AI adoption risks.
Ability to interpret legal and regulatory requirements and translate them into practical compliance guidance.
Experience reviewing AI clauses, vendor terms, customer-facing AI disclosures, DPAs, security/privacy questionnaires, or compliance documentation.
Experience working cross-functionally with Security, IT, and Product or Business stakeholders.
Strong written and verbal communication skills, including guidance, policies, executive summaries, and customer-facing compliance responses.
Practical, business-oriented judgment with the ability to balance innovation, regulatory risk, privacy risk, and operational feasibility.
Experience supporting customer assurance, audit readiness, certification readiness, regulatory engagement, or compliance programs preferred.

What you'll do

Requirements

Nice to have