Data Privacy Manager

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Oversee, coordinate, and execute KLDiscovery’s data protection strategy

• Ensure adherence to relevant data protection regulations, including GDPR, the UK Data Protection Act 2018, CCPA, and HIPAA

• Serve as the primary internal contact for data privacy inquiries

• Act as the main point of communication for data subjects and regulatory bodies

• Offer expert guidance on data protection issues

• Track compliance with international data protection laws and internal policies, procedures, and controls

• Keep abreast of new trends, legislative updates, and guidance related to data privacy and artificial intelligence

• Perform audits, risk assessments, and evaluations of data processing activities, including vendor assessments

• Coordinate and oversee DPIAs, TIAs, and LIAs, while providing advice on risk management

• Ensure compliance with cross-border data transfer regulations, including DPF and Schrems II requirements

• Maintain country-specific Records of Processing Activities across business units

• Develop and update data protection policies, privacy notices, and related documentation

• Assist with contractual frameworks and provide best-practice guidance to clients

• Manage data subject inquiries, complaints, SARs, and data deletions within legal timeframes

• Collaborate with supervisory authorities during data breaches or investigations

• Support cybersecurity incident response by providing advice on breach classification, notifications, and regulatory reporting

• Deliver data protection training and awareness initiatives

• Assist in client and commercial activities, including RFPs, due diligence, and questionnaires

• Contribute to KLD’s AI governance framework and ensure compliance readiness for the EU AI Act

• Report directly to the General Counsel and collaborate with IT, Cybersecurity, Legal, Marketing, Product, and People & Culture teams

⛳️ Requirements

• At least 5 years of experience in a dedicated privacy role, such as privacy manager or equivalent, within an international organization, ideally SaaS

• A degree in law, information security, IT, compliance, or a related discipline

• Professional certification in data protection or privacy, such as CIPP/E, CIPM, or GDPR Practitioner

• Comprehensive knowledge of GDPR, UK Data Protection Act 2018, US State privacy laws, HIPAA, and other pertinent legislation

• Experience in conducting security and privacy audits, risk assessments, Records of Processing Activities, DPIAs, and managing data protection initiatives

• Capability to translate privacy requirements into actionable operational guidance for product and internal teams

• Strong communication, analytical, and problem-solving abilities

• Ability to handle sensitive information with discretion and integrity

• Exceptional attention to detail

• Proactive and flexible approach to work

• Ability to work both independently and collaboratively

• High ethical standards and commitment to protecting privacy

• Confidence to challenge practices and advocate for compliance throughout the organization

🏝️ Benefits

• Competitive benefits and programs, which may vary by location, including comprehensive health and wellness benefits

• Retirement and financial programs

• Paid time off and various leave options

• Resources for employee assistance

• Opportunities for professional development

• Remote work options available for most employees

• A collaborative and inclusive workplace that promotes work-life balance, career advancement, and employee well-being