Director of Data Privacy and Compliance

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Formulate data privacy and compliance strategies alongside LSAC’s Office of General Counsel and Senior Counsel – Privacy and Compliance.

• Spearhead privacy initiatives and projects across interdisciplinary teams, including Privacy, business units, and technical/IT resources.

• Direct and sustain the LSAC Privacy Roadmap along with its associated work program.

• Guide the implementation of the privacy management platform.

• Manage the Data Subject Access Rights (DSAR) process, ensuring accurate and timely fulfillment of requests.

• Contribute to the development of Data Governance policies, procedures, and practices related to data protection.

• Supervise the creation and upkeep of the data inventory.

• Develop and maintain LSAC’s Record of Processing Activities (ROPA).

• Execute company-wide privacy training initiatives.

• Oversee back-end IT records management and retention processes.

• Identify, evaluate, and mitigate data protection risks across LSAC’s data landscape.

• Promote and implement privacy tools in collaboration with analysts, software developers, engineering leads, product managers, and business stakeholders.

• Prepare and deliver updates on the data privacy program and project status to senior management.

• Manage staff and oversee the Privacy & Compliance function.

⛳️ Requirements

• B.A. or B.S. degree with 5+ years of relevant experience.

• At least 3 years of experience in records management related to retention and compliance requirements.

• Familiarity with an operational data classification policy that supports tailored data protection measures.

• Experience with relational and unstructured data databases such as Oracle, CosmoDB, Azure SQL, and document file systems.

• Excellent written and verbal communication skills.

• Strong analytical, problem-solving, decision-making, project management, time management, prioritization, organizational, and detail-oriented skills.

• Ability to lead cross-functional teams and drive organizational change.

• Experience managing teams in an agile environment.

• IAPP certifications such as CIPP, CIPM, or CIPT are highly preferred.

• Experience with modern privacy platform implementation and operation, such as OneTrust and/or Microsoft data management and privacy offerings, is strongly preferred.

• Familiarity with MS Azure, including DevOps and Cloud Services, is strongly preferred.

• Experience with relational database administration and concepts, including Oracle/OCI, SQL Server, and Azure SQL, is strongly preferred.

• Knowledge of contemporary Microsoft Azure data platform components is strongly preferred.

• Proven experience managing staff, a Privacy & Compliance function, and adhering to cybersecurity best practices for data protection and compliance is strongly preferred.

• Understanding of inclusive design principles and digital accessibility standards.

• Availability to work during LSAC standard business hours, Monday to Friday, from 8:30 a.m. to 4:45 p.m. ET.

🏝️ Benefits

• Flexible remote work arrangement.

• No travel required.

• Commitment to equal opportunity employment.

• Culture of professional and leadership development.

• Regular business hours from Monday to Friday, 8:30 a.m. to 4:45 p.m. ET.

• Reasonable accommodations available for individuals with disabilities.