Privacy Director

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Develop and uphold Veracross' data protection and privacy initiatives.

• Ensure adherence to international privacy laws and regulations, including GDPR and CCPA.

• Create and revise privacy policies, procedures, and guidelines.

• Conduct privacy impact assessments and oversee continuous compliance.

• Manage and address data privacy incidents as well as data subject requests.

• Educate staff on data privacy best practices and enhance organizational awareness.

• Collaborate with cross-functional teams to integrate privacy by design principles.

• Act as the primary liaison for regulatory authorities and individuals concerning privacy-related issues.

• Stay informed about emerging global privacy trends, laws, and regulations.

• Report directly to the CISO.

⛳️ Requirements

• Extensive knowledge of international privacy laws and regulations, including GDPR and CCPA.

• Proven experience in developing and managing data protection and privacy programs within a SaaS business environment.

• Familiarity with data privacy impact assessments and incident response protocols.

• Strong communication and presentation abilities.

• Capability to collaborate efficiently with cross-functional teams.

• Meticulous attention to detail and robust analytical skills.

• Eligibility to work in the United States.

• 3–6 years of relevant global privacy experience in SaaS and/or educational settings.

• 3–6 years of experience in privacy, legal, cybersecurity, compliance, or related domains.

• Comprehensive understanding of global privacy laws and regulations, including GDPR, CCPA, PIPEDA, data protection frameworks, and privacy industry best practices.

• Knowledge of student privacy laws such as FERPA, COPPA, and PPRA.

• Experience in creating, supporting, and/or managing a privacy program.

• Proficiency in conducting privacy impact assessments, privacy evaluation methodologies, and compliance checks.

• Experience in developing, delivering, and overseeing privacy training and awareness initiatives.

• Demonstrated experience in executing data and privacy program controls.

• Exposure to AI governance, digital marketing privacy, or regulations surrounding emerging technologies.

• Privacy certification, such as CIPP/E or CIPP/US, is preferred.

🏝️ Benefits

• 3 weeks of vacation annually.

• 14 paid holidays each year, including the week off between Christmas and New Year's Eve.

• 56 hours of paid sick leave per year.

• Medical, Dental & Vision coverage (Blue Cross Blue Shield & EyeMed).

• Veracross LLC Fidelity 401(k) Plan with company matching.

• Annual bonus opportunities.

• An inclusive culture that supports team members in reaching their full potential.