Global Compliance & Privacy Officer

Overview

The organization is seeking an experienced and strategic Global Compliance & Privacy Officer based in the US to lead and evolve global compliance and privacy programs in support of a rapidly growing software and telematics business.

This role designs, implements, and continuously improves the global ethics, compliance, and privacy framework, while serving as a trusted advisor to executive leadership and business stakeholders. Success in this position requires strong legal and regulatory expertise combined with practical business judgment and experience operating within a multinational SaaS or technology company.

Reporting will be to the Chief Legal & Administrative Officer. The role can be remote or hybrid, depending on the candidate’s location.

Responsibilities

Global Privacy Program

• Lead the company’s global privacy program and privacy governance framework.
• Serve as privacy subject matter expert and primary advisor on data protection matters.
• Ensure compliance with:
  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018 (United Kingdom)
  • EU GDPR
  • Australia Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs) and amendments relating to privacy reform
  • New Zealand Privacy Act 2020, including the Information Privacy Principles (IPPs)
  • US state privacy laws (e.g., CCPA/CPRA) and other global privacy regulations applicable to company operations
• Develop and maintain privacy policies, standards, procedures, and controls.
• Conduct and oversee:
  • Privacy Impact Assessments (PIAs)
  • Data Protection Impact Assessments (DPIAs)
  • Legitimate Interest Assessments (LIAs)
• Partner with Product and Engineering to embed Privacy by Design into product development.
• Advise on international data transfers and cross-border processing activities.
• Manage customer privacy inquiries and regulatory requests.

Global Compliance Program

• Develop and maintain the company’s global ethics and compliance program.
• Maintain corporate policies and Code of Conduct.
• Lead compliance education and initiatives relating to:
  • Anti-bribery and corruption
  • Third-party due diligence
  • Conflicts of interest
  • Gifts and entertainment
  • Trade compliance and sanctions (as applicable)
  • Records management
• Conduct compliance risk assessments.
• Monitor emerging regulatory developments and recommend appropriate business responses.
• Support internal and external audits.
• Manage the whistleblower and ethics reporting program.
• Conduct and oversee internal investigations regarding privacy concerns, compliance concerns, and conflicts of interest.

Information Security and Incident Response

• Partner closely with Information Security to support governance initiatives.
• Participate in security incident response and privacy breach investigations.
• Assess regulatory notification obligations.
• Coordinate legal and regulatory reporting when required.
• Support implementation and maintenance of ISO 27001, SOC 2, and other security frameworks where applicable.

Qualifications

Experience

• Qualified solicitor in England & Wales, member of a US state bar, or equivalent legal qualification, or significant professional experience leading global compliance and privacy programs.
• Minimum of 10 years of experience in privacy, compliance, or technology law.
• Experience within a SaaS, software, telecommunications, or technology company.
• Deep knowledge of UK GDPR, EU GDPR, US state and federal privacy laws (e.g., CCPA/CPRA, HIPAA), Australia and New Zealand Privacy laws and global privacy principles.
• Demonstrated experience developing and managing enterprise compliance programs.
• Strong commercial contracting experience involving privacy and security provisions.
• Experience supporting multinational organizations.
• Excellent communication, negotiation, and influencing skills.
• Strong analytical and risk management capabilities.

Preferred Qualifications

• Certified Information Privacy Professional (CIPP/US, CIPP/E, or equivalent).
• Certified Information Privacy Manager (CIPM).
• Certified Information Privacy Technologist (CIPT).
• Experience with ISO 27001, SOC 2, or NIST frameworks.
• Experience supporting AI governance and emerging technology compliance.
• Experience in telematics, connected vehicles, IoT, mobility, or enterprise software.

Presence & Approach

• Executive presence; able to engage effectively with employees at all levels.
• Highly organized with a bias for systems, process, and follow-through.
• Direct, collaborative, and low-ego.

Global Footprint

• Comfortable operating across cultures and time zones.

Compensation & Benefits

• Base compensation range: $147,290 to $200,000 per annum.
• Actual base salary will be determined based on factors which may include relevant experience, skills, location (labor market data), credentials (education, certifications), and internal equity.

Benefits include a premium suite of health and wellness programs for you and your family, including:

• Medical, dental, vision
• Disability and life insurance
• Programs for family planning and diabetes management
• Coverage for women’s health
• Support for adult and elder care
• Paid parental leave
• 401(k) plan with matching company contributions

Additional time off:

• Paid time off up to 120 hours
• 13 paid holidays (including 3 floating holidays) per year
• Paid sick leave (amount may vary based on state or local laws applicable to the applicant’s geographic location).

Salary, other compensation, and benefits information is accurate as of the date of this posting; the company reserves the right to modify this information at any time, subject to applicable law.

Location

• Based in the US.
• Remote or hybrid depending on the candidate’s location.