Privacy Manager

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Lead Addi's privacy and AI governance as the Data Protection Officer and a trusted advisor to the General Counsel and Head of Legal.

• Ensure Addi's compliance with Colombian regulations and maintain good standing with the SIC and SFC.

• Facilitate the lawful, swift, and assured use of data and AI.

• Oversee the privacy program across all Addi entities, including compliance assessments, prioritization, and remediation efforts.

• Keep an updated overview of personal data flows, legal bases, counterparties, and regulatory registrations.

• Collaborate with Data and Cybersecurity teams to integrate privacy into data governance, encompassing classification, legal basis, retention, and minimization.

• Prepare for and provide guidance on incident response, including legal-risk assessment, stakeholder coordination, and regulatory reporting.

• Evaluate product, alliance, and vendor launches involving personal data prior to their go-live.

• Negotiate and assess data processing agreements and cross-border transfer terms with technology and cloud vendors.

• Develop and implement an AI governance framework for product AI and internal AI tools.

• Maintain a comprehensive inventory of AI use cases, conduct risk-based reviews, define proportional approval paths, and set rules for AI vendors.

• Utilize AI tools to expedite routine legal consultations and contract evaluations.

• Manage external advisors for additional or specialized expertise.

• Represent Addi before regulatory bodies on privacy and AI issues.

• Engage in industry working groups and public consultations, including participation through Colombia Fintech.

• Collaborate with senior leadership and cross-functional teams including Data, Cybersecurity, Engineering, product, alliance, and vendor teams.

⛳️ Requirements

• Licensed attorney.

• Over 10 years of cumulative legal/compliance experience.

• At least 6 years specifically in data protection/privacy.

• Demonstrated expertise in Colombian data protection law and regulatory practices.

• Direct experience engaging with the SIC, including submissions and inquiries.

• Experience functioning as the sole or primary owner of a privacy function.

• Previous roles as a DPO, privacy counsel, or senior privacy/compliance lead, preferably in a regulated, high-growth setting, or prior involvement with the SIC.

• Familiarity with PII flows through cloud infrastructures, data platforms, and AI/ML systems.

• Knowledge of the primary threats to personal data.

• Proficiency in discussing data architecture and system-level risks with Engineering, Data, and Cybersecurity teams.

• Experience negotiating or reviewing data processing agreements and cross-border transfer clauses with cloud/technology providers such as AWS.

• Proven experience implementing AI workflows for legal or privacy tasks, beyond using standard chat tools.

• Knowledge of AI governance regarding product AI, automated decisions, customer-facing agents, and internal AI tools.

• Awareness of AI vendor risks, including shadow AI and data retention issues associated with AI tools.

• Capability to function as a player-coach and execute tasks personally without relying on direct reports.

• Ability to manage external advisors effectively.

• Experience in prioritizing tasks based on actual risk exposure across a broad mandate.

• Sound judgment and integrity in making decisions related to material risks.

• Preferable: exposure to international frameworks such as GDPR and Brazil's LGPD.

• Conversational English proficiency is requested in the application form.

🏝️ Benefits

• Competitive salary.

• Equity in the company.

• Comprehensive benefits that extend beyond the basics.

• Opportunity to tackle a high-impact challenge in the financial services sector.

• Ownership and influence in shaping the company’s technology, strategy, culture, and values.

• Opportunities for growth in a rapidly expanding fintech.

• Collaboration with a world-class international team.

• A fast, transparent, and engaging hiring process.

• Feedback provided regardless of the outcome of the hiring process.