Director of Privacy & Compliance

We are looking for a seasoned Director of Privacy & Compliance to serve as the company’s expert on global data privacy and as a trusted partner to our business and commercial teams. Reporting directly to the Deputy General Counsel, this role is the operational owner of our end-to-end privacy program and carries shared accountability for regulatory compliance, legal operations excellence, and commercial contract support., 1. Privacy Program Ownership

• Own and continuously mature the global privacy program, including program strategy, roadmap, and governance framework.

• Manage the full cookie consent management lifecycle using OneTrust including cookie banner configuration, geolocation-based consent logic, template and category management.

• Administer the end-to-end Data Subject Request (DSR) workflow: intake, identity verification, response orchestration, and fulfillment tracking within statutory deadlines across all applicable jurisdictions.

• Lead Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new products, features, third-party integrations, and high-risk processing activities; embed privacy-by-design into the product development lifecycle.

• Advise on privacy considerations for AI and machine learning initiatives, including lawful basis for automated decision-making, data minimization in model training, and compliance with emerging AI regulations (EU AI Act, CCPA/GDPR AI requirements); partner with Product to embed privacy-by-design into AI development

• Draft, negotiate, manage, and maintain Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), and Binding Corporate Rules (BCRs) with vendors, partners, and customers.

• Oversee and maintain the company’s Records of Processing Activities (RoPA) and ensure accuracy across all business units.

• Manage relationships with Data Protection Authorities (DPAs) and serve as or coordinate with the company’s Data Protection Officer (DPO) as applicable.

1. Legal & Regulatory Compliance * Monitor the global privacy and data protection regulatory landscape; translate emerging requirements (new laws, guidance, enforcement actions) into actionable compliance obligations and internal policy updates.

• Own privacy-related policies, notices, and internal standards - including the external Privacy Notice, Cookie Policy, and internal data handling standards - ensuring they remain accurate and audit-ready.

• Partner with Information Security on data breach response plans, ensuring privacy obligations are embedded in incident response procedures.

• Advise on AI/ML governance from a privacy lens, including requirements under emerging AI regulations.

1. Legal Operations Management * Directly manage the Legal Operations Manager, setting priorities, driving professional development, and ensuring operational excellence across the legal department.

• Oversee legal operations functions including matter management, outside counsel management, legal spend tracking, contract lifecycle management (CLM) tooling, and legal department reporting.

1. Commercial Contract Support * Support commercial and enterprise contract negotiations particularly where privacy, data use, or data security provisions are in scope.

• Review, redline, and advise on customer and vendor agreements including MSAs, SaaS agreements, NDAs, and data-related addenda.

• Develop and maintain standard contract templates, playbooks, and fallback positions to accelerate deal cycles.

• Act as a trusted legal partner to Sales, Procurement, and Partnerships teams on time-sensitive commercial matters.

Required

• 8+ years of privacy, data protection, or related legal experience, with at least 3 years in a senior or lead privacy role at a global company or top-tier law firm.

• Deep, hands-on expertise with GDPR and at least one other major global privacy regime (CCPA/CPRA, LGPD, PIPL, etc.).

• Hands-on OneTrust experience is required - including cookie banner deployment and configuration, DSR workflow automation, assessment management (PIAs/DPIAs), and vendor risk management modules.

• Track record of drafting and negotiating commercial contracts, data processing agreements, and SCCs.

• Experience managing or mentoring legal professionals; comfort with hybrid IC/manager responsibilities.

• Exceptional written and verbal communication skills - able to distill complex legal and technical concepts for executive and non-legal audiences.

Preferred

• CIPP/E, CIPP/US, CIPM, or equivalent privacy certification.

• Experience with legal operations technology (CLM platforms, e-billing, matter management tools).

• Background in SaaS, technology, or other data-intensive industries.

• Familiarity with AI governance frameworks and emerging AI regulation

• ISO27001 or SOC2 certification experience

We offer a competitive benefits package designed to strengthen our employees’ physical and mental health, including unlimited vacation for exempt employees, flexible working locations, 401(k) plan with a company match, medical/dental/vision coverage with inclusive provisions including transgender services and fertility benefits, parental and caregiver leave, dependent, commuter and FSA benefits, professional development programs like Toastmasters, and mental wellness tools.