Compliance & Data Governance Analyst (Part-Time)

Acres is a leading land intelligence platform analyzing over 150M U.S. land parcels to power faster, smarter decisions for real estate, corporate, agriculture, and finance. Our mission: bring data-driven transparency to America’s largest asset. Learn more at Acres.com.

We are dedicated to the growth of our platform and the growth of our people. We're looking for high performers who go about their work with a sense of curiosity, responsibility, and a drive to make things better. We are a primarily onsite team located in beautiful downtown Fayetteville, Arkansas and this is an onsite position.

*Note: Acres seeks qualified candidates who are eligible to work in the United States. We are unable at this time to provide any sponsorship for work authorization.

• →Translate complex legal and regulatory requirements into clear, actionable guidance for business stakeholders
• →Monitor developments in state privacy laws, AI regulation, and enforcement trends
• →Proactively identify risks and map them to targeted mitigation strategies
• →Maintain the company's internal policy framework, including the acceptable use policy, model whitelist/blacklist, and incident response plan, et al. 
• →Partner cross-functionally with marketing, engineering, product, and sales
• →Conduct vendor risk assessments and data privacy audits
• →Prepare research memos and compliance summaries for internal stakeholders
• →Track and apply regulatory requirements. Monitor privacy and AI regulations across jurisdictions, assess how and when they apply to Acres, and recommend updates to our policies, terms, and practices as the business grows.
• →Privacy operations. Build and run the processes that handle privacy obligations day to day, including data subject requests, and train teams across the company to execute them consistently, timely, and compliantly.
• →Manage contract and vendor compliance. Review vendor terms, data processing agreements, and security posture; maintain visibility into key terms and obligations across our agreements, using AI tooling to make contracts searchable and reportable.
• →Built compliance solutions. Stand up trackers, dashboards, and workflows that make compliance measurable instead of ad hoc.
• →Operationalize privacy for the whole company. Create internal processes, checklists, and plain-English guidance that let non-legal teams handle data responsibly, and keep our policy library current as the business evolves.

• Current graduate student (JD, LL.M., MIS, business analytics, MBA, or similar), upper-level undergraduate (MIS, data science, business, computer science, or similar), or 1–2 years of professional experience in compliance, privacy, risk, audit, or operations.
• Experience in privacy, regulatory compliance, or risk management; coursework or IAPP study a plus
• Strong research and writing skills: you can turn dense source material into clear, actionable guidance and effective training.
• Comfort with data and systems: spreadsheets at minimum; AI tools, data mapping, or analytics coursework is a plus. 
• An operator's mindset: you build processes, close loops, and work independently when the path isn't fully defined.

• Coursework or experience in privacy (e.g., GDPR, CCPA/state privacy laws), cybersecurity, or AI governance.
• Familiarity with vendor risk assessment, DPAs, SOC 2 Type II.
• Experience using AI tools (Claude, ChatGPT, etc.) for document review or workflow automation
• Interest in real estate, agriculture, or geospatial data