Director, Privacy and Compliance

Overview

This role serves as the expert on global data privacy and a trusted partner to business and commercial teams. Reporting to the Deputy General Counsel, the Director of Privacy & Compliance will be the operational owner of the end-to-end privacy program with shared accountability for regulatory compliance, legal operations excellence, and commercial contract support.

Responsibilities

Privacy Program Ownership

• Own and continuously mature the global privacy program, including program strategy, roadmap, and governance framework.
• Manage the full cookie consent management lifecycle using OneTrust, including cookie banner configuration, geolocation-based consent logic, template and category management.
• Administer the end-to-end Data Subject Request (DSR) workflow: intake, identity verification, response orchestration, and fulfillment tracking within statutory deadlines across all applicable jurisdictions.
• Lead Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new products, features, third-party integrations, and high-risk processing activities; embed privacy-by-design into the product development lifecycle.
• Advise on privacy considerations for AI and machine learning initiatives, including lawful basis for automated decision-making, data minimization in model training, and compliance with emerging AI regulations (EU AI Act, CCPA/GDPR AI requirements); partner with Product to embed privacy-by-design into AI development.
• Draft, negotiate, manage, and maintain Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), and Binding Corporate Rules (BCRs) with vendors, partners, and customers.
• Oversee and maintain Records of Processing Activities (RoPA) and ensure accuracy across all business units.
• Manage relationships with Data Protection Authorities (DPAs) and serve as or coordinate with the company’s Data Protection Officer (DPO) as applicable.

Legal & Regulatory Compliance

• Monitor the global privacy and data protection regulatory landscape; translate emerging requirements (new laws, guidance, enforcement actions) into actionable compliance obligations and internal policy updates.
• Own privacy-related policies, notices, and internal standards—including the external Privacy Notice, Cookie Policy, and internal data handling standards—ensuring they remain accurate and audit-ready.
• Partner with Information Security on data breach response plans, ensuring privacy obligations are embedded in incident response procedures.
• Advise on AI/ML governance from a privacy lens, including requirements under emerging AI regulations.

Legal Operations Management

• Directly manage the Legal Operations Manager, setting priorities, driving professional development, and ensuring operational excellence across the legal department.
• Oversee legal operations functions including matter management, outside counsel management, legal spend tracking, contract lifecycle management (CLM) tooling, and legal department reporting.

Commercial Contract Support

• Support commercial and enterprise contract negotiations, particularly where privacy, data use, or data security provisions are in scope.
• Review, redline, and advise on customer and vendor agreements including MSAs, SaaS agreements, NDAs, and data-related addenda.
• Develop and maintain standard contract templates, playbooks, and fallback positions to accelerate deal cycles.
• Act as a trusted legal partner to Sales, Procurement, and Partnerships teams on time-sensitive commercial matters.

Qualifications

Required

• 8+ years of privacy, data protection, or related legal experience, with at least 3 years in a senior or lead privacy role at a global company or top-tier law firm.
• Deep, hands-on expertise with GDPR and at least one other major global privacy regime (CCPA/CPRA, LGPD, PIPL, etc.).
• Hands-on OneTrust experience is required, including cookie banner deployment and configuration, DSR workflow automation, assessment management (PIAs/DPIAs), and vendor risk management modules.
• Track record of drafting and negotiating commercial contracts, data processing agreements, and SCCs.
• Experience managing or mentoring legal professionals; comfort with hybrid IC/manager responsibilities.
• Exceptional written and verbal communication skills, able to distill complex legal and technical concepts for executive and non-legal audiences.

Preferred

• CIPP/E, CIPP/US, CIPM, or equivalent privacy certification.
• Experience with legal operations technology (CLM platforms, e-billing, matter management tools).
• Background in SaaS, technology, or other data-intensive industries.
• Familiarity with AI governance frameworks and emerging AI regulation.
• ISO27001 or SOC2 certification experience.

Compensation & Benefits

• Target Compensation: $120,000 - $135,000 plus Bonus eligible
• Unlimited vacation for exempt employees
• Flexible working locations
• 401(k) plan with a company match
• Medical/dental/vision coverage with inclusive provisions including transgender services and fertility benefits
• Parental and caregiver leave
• Dependent, commuter and FSA benefits
• Professional development programs like Toastmasters
• Mental wellness tools

Location

• Flexible working locations