Compliance Manager
Posted 9 Oct 2026
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 4–7 yrs
- Management level
- Individual contributor
- Employment
- On-Site
- Contract
- Full-time
- Visa sponsorship
- Offered
No salary listed for this role.
Our Mission
Reflection is a research lab making intelligence open and accessible for everyone to use, customize, and build on. We build open models that let anyone control their intelligence and help shape the future of AI. Our mission: make intelligence open and accessible to all.
Role Overview
Reflection AI's Compliance and AI Governance function spans six pillars: AI Governance, Data Governance, Trade Compliance, Privacy Operationalization, Government Contracting Compliance, and Corporate Compliance. The team builds the policies, controls, and operating rhythms that let the company move fast while staying defensible with regulators, customers, and partners.
We're looking for a senior generalist who can flex across multiple pillars rather than own a single lane. You'll take ambiguous, cross-cutting problems (a new regulation, a customer due-diligence request, an internal process gap) and turn them into working programs: policies, SOPs, training, and monitoring. This role is a force multiplier for the pillar leads and a direct partner to the Head of Compliance and AI Governance.
What You'll Do
-
Stand up and maintain compliance processes and SOPs across pillars (e.g., insider risk, background checks, external reporting process, vendor/compliance tooling)
-
Support our security framework compliance posture (SOC 2, ISO 27001, NIST 800-53/800-171, CMMC) by maintaining evidence, coordinating with control owners, and prepping for audits and assessments
-
Own or support day-to-day TPRM operations: vendor security questionnaires, risk tiering, onboarding reviews, and tracking remediation of vendor findings
-
Respond to inbound customer and partner security/compliance questionnaires, pulling in subject-matter owners as needed
-
Partner with pillar leads (AI Governance, Data Governance, Trade Compliance, Privacy, Gov Contracting) to fill gaps, cover surge work, and keep cross-pillar initiatives moving
-
Draft and maintain policies, process documentation, and training materials for internal and external audiences
-
Track regulatory developments (AI, data, privacy) and translate them into concrete internal workstreams
-
Prepare materials for leadership and cross-functional updates (steering committees, exec reporting, knowledge-share sessions)
-
Identify process gaps and build the scaffolding (trackers, templates, intake forms) to close them