{"data":{"id":181287,"slug":"chief-compliance-officer-ai-saas-gdpr-eu-ai-act-goteborg","type":"job","title":"Chief Compliance Officer \u2013 AI SaaS, GDPR & EU AI Act \u2013 G\u00f6teborg","description":"myflow gives solopreneurs and small teams an AI-powered business platform \u2014 CRM, marketing, sales, e-signing and automation, run either by the customer or by AI teammates working on their behalf. We launched in Sweden in 2024 and are now expanding internationally.\nShipping autonomous AI agents that handle customer data, send marketing, and find leads across multiple jurisdictions puts us in the middle of the fastest-moving area of tech regulation there is. We're hiring our first Chief Compliance Officer to own it.\nAbout the role\nYou report to the CEO and you're building this function from nothing. There is no team beneath you on day one and no playbook to inherit \u2014 you will write the policies, run the assessments, sit in the customer calls, and decide what we can and cannot offer. If you want a large department and an established framework, this isn't it. If you want to define how an AI-native product company handles compliance while the rules are still being written, it is.\nWhat you will do\nOwn our EU AI Act position: classify our AI systems, meet Article 50 transparency obligations, and manage our exposure downstream of the foundation models we build on.\nOwn our ISO 42001 practices ensuring we are a proven leader in demonstrating mature AI governance.\nOwn GDPR across the platform, with particular focus on our lead generation and outbound marketing features \u2014 lawful basis, notification duties, and the ePrivacy rules governing automated outreach.\nBuild our US privacy posture as we expand: HIPAA Business Associate obligations where healthcare practitioners use our platform, CAN-SPAM and TCPA for agent-driven outreach, and state privacy law compliance.\nTake us through SOC 2, ISO 27001, ISO 27701 and stand behind them in customer security reviews.\nSupport our entry into US public-sector and Tribal markets \u2014 contracting with sovereign entities, sovereign immunity and limited waiver provisions, tribal business licensing, and where relevant federal procurement requirements.\nBe the compliance voice in product decisions early, not the person who blocks a launch the week before it's live.\n\nWe require\nSenior compliance, privacy or regulatory experience at a SaaS or technology company, ideally one that has expanded across jurisdictions.\nDeep working knowledge of GDPR in a product context \u2014 not policy administration, but decisions about what a feature is allowed to do.\nProven history with the EU AI Act and ISO 42001 guidelines, with direct experience in how it applies to agentic AI products.\nExperience running or supporting a SOC 2, ISO 27001, ISO 27701 programme end to end.\nSenior level experience in navigating Indigenous markets with a portfolio of successful implementation around sovereign immunity data laws, federal level tribal business licensing agreements, and cultural sensitivities.\nHIPAA experience on the vendor or Business Associate side, including BAA.\nComfort operating alone, at pace, with incomplete information and unsettled law.\nFluent professional English.\nCIPP\/E, CIPP\/US or CIPM certification.\n\n\nExperience with US federal procurement, including FedRAMP.\n\n\nSwedish language skills.\n\nWhat we offer\nStandard Swedish employment agreement. Hybrid arrangement. Negotiable salary.\nPractical details\nLocation: Gothenburg, hybrid arrangement. Start: by agreement. We review applications 10 days after the listed date of the ad.\nQuestions: Oliver Hertzman Kraft Email: Oliver@myflow.io","language":"sv","is_translated":true,"title_original":"Chief Compliance Officer  AI SaaS, GDPR & EU AI Act  G\u00f6teborg","description_original":"myflow gives solopreneurs and small teams an AI-powered business platform \u2014 CRM, marketing, sales, e-signing and automation, run either by the customer or by AI teammates working on their behalf. We launched in Sweden in 2024 and are now expanding internationally.\nShipping autonomous AI agents that handle customer data, send marketing, and find leads across multiple jurisdictions puts us in the middle of the fastest-moving area of tech regulation there is. We're hiring our first Chief Compliance Officer to own it.\nAbout the role\nYou report to the CEO and you're building this function from nothing. There is no team beneath you on day one and no playbook to inherit \u2014 you will write the policies, run the assessments, sit in the customer calls, and decide what we can and cannot offer. If you want a large department and an established framework, this isn't it. If you want to define how an AI-native product company handles compliance while the rules are still being written, it is.\nWhat you will do\nOwn our EU AI Act position: classify our AI systems, meet Article 50 transparency obligations, and manage our exposure downstream of the foundation models we build on.\nOwn our ISO 42001 practices ensuring we are a proven leader in demonstrating mature AI governance.\nOwn GDPR across the platform, with particular focus on our lead generation and outbound marketing features \u2014 lawful basis, notification duties, and the ePrivacy rules governing automated outreach.\nBuild our US privacy posture as we expand: HIPAA Business Associate obligations where healthcare practitioners use our platform, CAN-SPAM and TCPA for agent-driven outreach, and state privacy law compliance.\nTake us through SOC 2, ISO 27001, ISO 27701 and stand behind them in customer security reviews.\nSupport our entry into US public-sector and Tribal markets \u2014 contracting with sovereign entities, sovereign immunity and limited waiver provisions, tribal business licensing, and where relevant federal procurement requirements.\nBe the compliance voice in product decisions early, not the person who blocks a launch the week before it\u2019s live.\n\nWe require\nSenior compliance, privacy or regulatory experience at a SaaS or technology company, ideally one that has expanded across jurisdictions.\nDeep working knowledge of GDPR in a product context \u2014 not policy administration, but decisions about what a feature is allowed to do.\nProven history with the EU AI Act and ISO 42001 guidelines, with direct experience in how it applies to agentic AI products.\nExperience running or supporting a SOC 2, ISO 27001, ISO 27701 programme end to end.\nSenior level experience in navigating Indigenous markets with a portfolio of successful implementation around sovereign immunity data laws, federal level tribal business licensing agreements, and cultural sensitivities.\nHIPAA experience on the vendor or Business Associate side, including BAA.\nComfort operating alone, at pace, with incomplete information and unsettled law.\nFluent professional English.\nCIPP\/E, CIPP\/US or CIPM certification.\n\n\nExperience with US federal procurement, including FedRAMP.\n\n\nSwedish language skills.\n\nWhat we offer\nStandard Swedish employment agreement. Hybrid arrangement. Negotiable salary.\nPractical details\nLocation: Gothenburg, hybrid arrangement. Start: by agreement. We review applications 10 days after the listed date of the ad.\nQuestions: Oliver Hertzman Kraft Email: Oliver@myflow.io","price":null,"currency":"SEK","status":"active","noindex":true,"location":{"address":"VASAGATAN 11","full_address":null,"city":"G\u00d6TEBORG","country":"SE","latitude":57.697801767971,"longitude":11.965351406263},"metadata":{"region":"V\u00e4stra G\u00f6talands l\u00e4n","duration":"Tills vidare","employer":"MyFlow Learning AB","postcode":"41124","positions":1,"profession":"Standardiseringsingenj\u00f6r","salary_type":"Fast m\u00e5nads- vecko- eller timl\u00f6n","employer_url":"https:\/\/myflow.io","scope_of_work":"100\u2013100 %","working_hours":"Heltid","contact_person":"Oliver Hertzman Kraft","employment_type":"full_time","occupation_field":"Yrken med teknisk inriktning","employer_workplace":"MyFlow Learning AB","translation_status":"done","experience_required":true,"employment_type_label":"Tillsvidareanst\u00e4llning (inkl. eventuell provanst\u00e4llning)"},"user_id":null,"is_sponsored":false,"views_count":0,"ai_views_count":1,"ai_vendor_counts":{"anthropic":1},"visibility":"public","submission_source":null,"submission_ai_name":null,"has_owner_email":true,"can_contact_owner":true,"phone":null,"owner_email":"oliver@myflow.se","images":[],"published_at":"2026-09-01T07:58:20+00:00","expires_at":"2026-09-16T23:59:59+00:00","created_at":"2026-09-02T03:15:07+00:00","updated_at":"2026-09-02T04:01:27+00:00"}}