Overview
This role supports the Data Privacy team by managing a variety of projects including privacy audits, data infrastructure risk management, security controls, policy development, and research. The position involves ensuring compliance with international privacy regulations and standards, and facilitating the implementation and monitoring of privacy policies and procedures.
Responsibilities
- Conduct research and analysis on data privacy regulations and industry frameworks across multiple countries.
- Prepare guidance on the business impact of changes in data privacy laws and practices.
- Develop, implement, and maintain global privacy and data protection policies, notices, controls, and internal procedures.
- Advise internal stakeholders on obligations under applicable privacy laws to support informed decision-making.
- Draft and review data processing agreements (DPAs).
- Perform Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and other compliance monitoring and risk assessments.
- Maintain and review records of processing activities (RoPA).
- Collaborate with information security, product, procurement, and other teams to enhance the privacy program and assess technology-related risks.
- Conduct compliance audits and report identified risks.
- Analyze and report on the effectiveness of privacy by design and default strategies, data governance, and data risk management.
- Support the development and implementation of systems and processes for privacy and data protection compliance.
- Handle data subject requests.
Requirements
- Minimum 2 years of experience in data protection, privacy, or related fields.
- Educational background in Law or related disciplines such as Information Security or Computer Science.
- In-depth knowledge of European data protection laws, including GDPR and emerging privacy regulations.
- Familiarity with Canadian and U.S. privacy regulations, as well as global standards and frameworks.
- Understanding of technical concepts such as web applications and cloud computing.
- Experience with privacy or security audits is advantageous.
- Solid understanding of information security principles and methodologies.
- Professional certifications in privacy (e.g., CIPP, CIPT), risk management, or audit are a plus.
- Experience advising online technology companies and data-driven businesses across multiple jurisdictions is beneficial.
- Self-motivated with strong critical thinking and problem-solving skills; able to work independently and collaboratively.
Additional Information
- This role may involve exposure to adult content.
Location
The organization has offices in Montreal (Quebec), Austin (Texas), and Nicosia (Cyprus). Some positions require full-time in-office attendance, while others offer a hybrid or remote work environment.