Director, Privacy and Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of and enhance the global privacy program, including its strategy, roadmap, and governance structure.

• Oversee the complete lifecycle of the OneTrust cookie consent management, which encompasses banner configuration, geolocation-based consent logic, templates, and categories.

• Manage the comprehensive Data Subject Request workflow within statutory deadlines across relevant jurisdictions.

• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for products, features, third-party integrations, and high-risk processing activities.

• Integrate privacy-by-design principles into the product and AI/ML development lifecycles.

• Provide guidance on lawful bases for automated decision-making, data minimization in model training, and emerging AI regulations.

• Draft, negotiate, manage, and uphold Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), and Binding Corporate Rules (BCRs).

• Keep the company's Records of Processing Activities updated across business units.

• Manage relationships with Data Protection Authorities and serve as, or coordinate with, the Data Protection Officer (DPO) as necessary.

• Track global privacy and data protection regulations and convert requirements into compliance obligations and policy updates.

• Be responsible for privacy policies, notices, and internal data handling standards.

• Collaborate with Information Security on data breach response plans.

• Directly supervise the Legal Operations Manager and promote operational excellence within the legal department.

• Oversee matter management, outside counsel management, tracking of legal spend, Contract Lifecycle Management (CLM) tools, and legal reporting.

• Assist in commercial and enterprise contract negotiations that involve privacy, data use, or data security.

• Review, edit, and provide advice on Master Service Agreements (MSAs), Software as a Service (SaaS) agreements, Non-Disclosure Agreements (NDAs), and data-related addenda.

• Maintain standard contract templates, playbooks, and fallback positions.

• Collaborate with Sales, Procurement, and Partnerships on urgent commercial matters.

⛳️ Requirements

• A minimum of 8 years of experience in privacy, data protection, or related legal fields.

• At least 3 years in a senior or lead privacy role at a global organization or a top-tier law firm.

• Extensive, practical knowledge of GDPR and at least one other major global privacy framework, such as CCPA/CPRA, LGPD, or PIPL.

• Required hands-on experience with OneTrust, including cookie banner deployment and configuration, automation of DSR workflows, assessment management (PIAs/DPIAs), and vendor risk management modules.

• Proven ability to draft and negotiate commercial contracts, DPAs, and SCCs.

• Experience in managing or mentoring legal professionals.

• Outstanding written and verbal communication capabilities.

• Preferred certifications include CIPP/E, CIPP/US, CIPM, or equivalent privacy credentials.

• Familiarity with legal operations technology, such as CLM platforms, e-billing, and matter management tools is preferred.

• A background in SaaS, technology, or other data-intensive sectors is preferred.

• Knowledge of AI governance frameworks and emerging AI regulations is preferred.

• Experience with ISO27001 or SOC2 certification is preferred.

🏝️ Benefits

• Bonus eligibility.

• Unlimited vacation for exempt employees.

• Flexible work locations.

• 401(k) plan with company matching.

• Coverage for medical, dental, and vision.

• Inclusive services for transgender individuals and fertility benefits.

• Parental and caregiver leave policies.

• Benefits for dependents, commuters, and Flexible Spending Accounts (FSA).

• Professional development opportunities, including programs like Toastmasters.

• Tools for mental wellness.

• Accommodations available during the application process.