AI Governance & Compliance Manager
Listed on 2026-05-26
-
IT/Tech
Information Security, Data Security
We believe in the power and joy of learning
At Cengage, our employees have a direct impact in helping students around the world discover the power and joy of learning. We are bonded by our shared purpose – driving innovation that helps millions of learners improve their lives and achieve their dreams through education.
Cengage's portfolio of businesses supports student choice by providing a range of pathways that help learners achieve their goals and lead a choice-filled life.
Our culture values inclusion, engagement, and discovery
Our business is driven by our strong culture, and we know that creating an inclusive workplace is absolutely essential to the success of our company and our learners, as well as our individual well-being. We recognize the value of diverse perspectives in everything we do, and strive to ensure employees of all levels and backgrounds feel empowered to voice their ideas and bring their authentic selves to work.
We achieve these priorities through programs, benefits, and initiatives that are integrated into the fabric of how we work every day. To learn more, please see
The Manager, AI Governance & Policy defines and enforces the AI governance frameworks that ensure safe, responsible, and compliant AI usage across Cengage. You will translate the enterprise AI strategy into actionable policies, monitor compliance across use cases, and serve as the operational owner of Cengage's AI governance posture.
This role requires rare judgment: the ability to enable speed‑of‑business AI adoption while maintaining rigorous guardrails. The ideal candidate understands both the technical substance of modern AI and the organizational dynamics of policy enforcement, and can engage credibly with Legal, Security, Privacy, and Product leadership.
Key Responsibilities AI Policy Development & Enforcement- Develop and maintain AI policies, standards, and acceptable use frameworks
- Operationalize policies through tooling, training, and monitoring systems
- Monitor compliance across AI use cases, platforms, and user populations
- Conduct periodic policy reviews and updates as the AI landscape evolves
- Serve as the point of contact for AI policy questions from the business
- Track AI‑related risk incidents, investigate root causes, and drive remediation
- Manage the AI incident response process for issues such as data exposure or misuse
- Ensure audit readiness across AI initiatives and partner with Internal Audit
- Oversee data usage governance for AI including training data and retrieval
- Maintain documentation, evidence, and attestation for all AI controls
- Partner with Legal, Privacy, Security, and Product on cross‑functional governance decisions
- Deliver periodic governance reporting to the VP and executive team
- Maintain metrics on policy compliance rates, incident frequency, and governance coverage
- Lead the AI governance committee and associated operating rhythm
- Serve as an escalation point for novel or ambiguous governance situations
- Bachelor's degree in Computer Science, Law, Public Policy, Information Systems, or related field
- 5+ years of experience in governance, risk, compliance, or security roles
- Demonstrated experience developing and enforcing enterprise technology policies
- Working knowledge of modern AI technologies and their risk surfaces
- Strong understanding of data privacy, security, and regulatory frameworks
- Excellent written communication skills for policies, standards, and executive reports
- Strong stakeholder management across Legal, Security, Product, and Executive audiences
- Judgment and discretion handling sensitive risk, incident, and audit situations
- Experience with emerging AI regulation (EU AI Act, NIST AI RMF, state‑level regulations)
- Background in EdTech with familiarity with FERPA, COPPA, and education data privacy
- Certifications in governance or security (CISSP, CISA, CIPP, CRISC)
- Experience with vendor risk management and third‑party AI approvals
- Background working with Internal Audit, Legal, and regulatory bodies
- Familiarity with AI incident response and red‑team practices
You…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).