AI Roadmap/Layer 09 · 09. AI Safety / Security / Governance / Observability
9.3

9.3 AI Governance, Compliance & Audit Evidence

GDPR/CCPA privacy compliance, Zero Data Retention (ZDR), policy-as-code (Rego), NIST AI RMF 1.0, EU AI Act conformity, and automated audit evidence bundles.

Privacy Compliance, Zero Data Retention & Policy-as-Code

GDPR/CCPA compliance, Zero Data Retention (ZDR) enforcement, user consent ledgers, Open Policy Agent (OPA/Rego) declarative policy gates, and automated access control reviews.

🏢 Companies
OneTrustBigIDDatabricksCredo AI
🛠️ Tech Stack
Data PrivacyZero Data Retention (ZDR)Policy-as-CodeOPA / RegoConsent LedgerOneTrustBigID
💼 Roles & Salary
AI Governance Specialist、Privacy Engineer、Compliance Engineer
💰 $195K - $420K / year (AI Privacy & Policy-as-Code) | ¥540K - ¥1.28M / year
📚 Prerequisites: Open Policy Agent (OPA) & Rego Policy Authoring • Global AI Privacy Regulations (GDPR/CCPA/PIPL) • Zero Data Retention (ZDR) Architecture & Verification • Data Catalog Lineage & Consent Revocation Flows

NIST AI RMF Mapping, Third-Party Model Vetting & Audit Evidence

NIST AI RMF 1.0, ISO/IEC 42001, and EU AI Act regulatory mappings, third-party model vendor vetting, tamper-proof automated audit evidence bundles, and exception management.

🏢 Companies
Credo AIIBM (watsonx.governance)OneTrustMicrosoft
🛠️ Tech Stack
NIST AI RMFISO 42001EU AI ActAudit EvidenceThird-Party VettingCredo AIIBM watsonx
💼 Roles & Salary
AI Governance Specialist、Compliance Engineer、AI Risk Consultant
💰 $200K - $435K / year (AI Governance & Regulatory Audit) | ¥560K - ¥1.32M / year
📚 Prerequisites: NIST AI RMF 1.0 Functions (Govern/Map/Measure/Manage) • EU AI Act Risk Classification & Conformity Assessments • Tamper-proof Evidence Collection & Audit Trails • Third-Party Model SLA, Vulnerability & Exception Reviews