Senior Principal - Privacy and AI Governance

• *About Providence**
• -------------------

Providence, one of the US’s largest not\-for\-profit healthcare systems, is committed to high quality, compassionate healthcare for all. Driven by the belief that health is a human right and the vision, ‘Health for a better world’, Providence and its 121,000 caregivers strive to provide everyone access to affordable quality care and services.

Providence has a network of 51 hospitals, 1,000\+ care clinics, senior services, supportive housing, and other health and educational services in the US.

Providence India is bringing to fruition the transformational shift of the healthcare ecosystem to Health 2\.0\. The India center will have focused efforts around healthcare technology and innovation, and play a vital role in driving digital transformation of health systems for improved patient outcomes and experiences, caregiver efficiency, and running the business of Providence at scale.

• *Why Us?**
• ----------

• Best In\-class Benefits
• Inclusive Leadership
• Reimagining Healthcare
• Competitive Pay
• Supportive Reporting Relation
• *Position Summary**

====================

The Privacy and AI Governance Manager will strengthen the assessment, implementation and continuous improvement of PGC’s privacy and AI governance programs. The individual will closely partner with business, Technology, Cybersecurity, Legal, Procurement, HR, and product teams to embed privacy and AI governance requirements throughout the data and AI lifecycles \- from ideation and collection through design, development, deployment, monitoring, retention, and decommissioning. The individual will also identify and help operationalize privacy and HIPAA obligations arising from customer contracts and Business Associate Agreements (BAAs) throughout the customer contractual lifecycle.

• *Key Responsibilities**

========================

• *Privacy Governance**
• ---------------------

• Manage the data privacy governance framework, with particular focus on the Digital Personal Data Protection Act, 2023 and other applicable privacy requirements.
• Identify HIPAA and data privacy obligations arising from external customer contracts and Business Associate Agreements (BAAs), ensure appropriate safeguards are implemented through the contractual lifecycle, including handling of Personally Identifiable Information (PII) and Protected Health Information (PHI). Coordinate implementation and ongoing compliance with applicable safeguards.
• Conduct privacy risk assessments, gap assessments, Data Protection Impact Assessments, and remediation tracking for business processes and applications.
• Maintain governance for privacy notices, consent and withdrawal, data\-principal rights, records of processing activities, purpose limitation, data minimization, retention, disposal, data flows, and cross\-functional accountability.
• Develop and deliver role\-based privacy awareness, communications, and training for employees, leaders, process owners and other relevant groups.
• Act as the single point of contact for data privacy matters, providing practical advisory support that ensures compliance requirements are met.

• *AI Governance**
• ----------------

• Operationalize AI governance framework covering entity\-level and use\-case\-level risks and controls across the full AI lifecycle.
• Maintain a standardized AI risk taxonomy, risk and control library, assessment methodology, evidence requirements, maturity criteria, and reporting approach.
• Assess AI control design and operating effectiveness; collaborate with respective control owners to elevate governance maturity and follow through to closure.
• Review AI use cases and provide subject matter expertise on privacy exposures and necessary safeguards.
• Support strengthening policies and procedures on AI governance across variety of use cases (generative AI, large and small language models, agentic AI, enterprise AI, native AI, and third\-party AI solutions).
• Align the program, as appropriate, with recognized frameworks such as the NIST AI Risk Management Framework, ISO/IEC 42001, healthcare AI guidance, and Providence AI principles.
• Monitor regulatory and industry developments and recommend timely updates to policies, controls, training, and governance practices.

• *Qualifications and Experience**

=================================

• Bachelor’s degree in law, information technology, cybersecurity. Postgraduate qualification is preferred.
• 8–12 years of experience in privacy, data protection, technology risk, compliance, information governance, AI governance, or related areas, including experience leading cross\-functional programs.
• Working knowledge of the DPDP Act, privacy principles, consent and rights management, records of processing, impact assessments, incident management, retention, and third\-party risk.
• Strong understanding of AI governance and risk concepts across design, development, testing, deployment, monitoring, change, and retirement.
• Experience developing risk and control matrices, testing controls, evaluating evidence, assessing maturity, and managing remediation.
• Ability to interpret regulatory and framework requirements and convert them into practical business and technology controls.
• Experience engaging senior leaders and collaborating across cross functional teams.
• Experience in healthcare or another highly regulated environment is preferred.

• *Preferred Credentials**

=========================

• Privacy certification such as Certified in Healthcare Privacy Compliance (CHPC), Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), or an equivalent credential.
• Risk, audit, security, or governance certification such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or an equivalent credential.
• Training or certification relating to responsible AI, NIST AI RMF, ISO/IEC 42001, AI assurance, or model risk management.

Providence’s vision to create ‘Health for a Better World’ aids us to provide a fair and equitable workplace for all in our employment, whether temporary, part\-time or full time, and to promote individuality and diversity of thought and background, and acknowledge its role in the organization’s success. This makes us committed towards equal employment opportunities, regardless of race, religion or belief, color, ancestry, disability, marital status, gender, sexual orientation, age, nationality, ethnic origin, pregnancy, or related needs, mental or sensory disability, HIV Status, or any other category protected by applicable law. In furtherance to our mission in building a more inclusive and equitable environment, we shall, from time to time, undertake programs to assist, uplift and empower underrepresented groups including but not limited to Women, PWD (Persons with Disabilities), LGTBQ\+ (Lesbian, Gay, Transgender, Bisexual or Queer), Veterans and others. We strive to address all forms of discrimination or harassment and provide a safe and confidential process to report any misconduct.

Contact our Integrity hotline also, read our Code of Conduct.