Key Responsibilities: Regulatory Interpretation & Compliance 1. Monitor and interpret data & AI related laws and regulations, including data protection laws (e.g., China PIPL, EU GDPR, US CCPA/state laws), AI regulations (e.g., EU AI Act, US Executive Order on AI), and trade controls (e.g., export restrictions on AI technologies) 2. Translate legal requirements into actionable IT and digital architecture and technical controls (e.g., data hosting / localization, anonymization, cross-border transfer mechanisms, cloud hosting, LLM implementation) Responsible AI Governance 3. Develop and help implement company-wide guidelines for ethical AI use, aligning with frameworks like NIST AI RMF, Google’s AI Principles, and OECD AI Policy 4. Collaborate with cross-functional teams to embed compliance into AI/ML lifecycle (e.g., bias audits, transparency disclosures, privacy and security) Risk Mitigation & Stakeholder Guidance 5. Advise internal teams on data/AI risks assessment and migitation plan 6. Draft internal policies, training materials, and contract clauses (e.g., DPAs, AI vendor assessments) 7. Bridge business, legal and technical teams to ensure compliant yet innovative solutions implementation Qualifications: • MBA with a legal background or equivalent experience in tech law • Knowledge of global data/AI regulations (PIPL, GDPR, HIPAA, AI Act) and frameworks (NIST, ISO 42001, ISO 27001) • Ability to distill complex laws into technical/business requirements • Strong communication skills; fluency in English (Chinese/EU languages a plus) • Experience in life sciences/healthcare (preferred but not mandatory）