Support and enhance compliance programs related to privacy, data protection, marketing compliance, AI governance, and broader data management initiatives.
Provide guidance on the collection, use, sharing, retention, and protection of personal data across products, services, and internal business processes.
Assist in the development, maintenance, and continuous improvement of privacy policies, procedures, standards, templates, and related documentation.
Maintain and update Records of Processing Activities (RoPA), working closely with Information Security and operational teams to document new and modified processing activities.
Conduct privacy reviews and assessments as part of supplier onboarding, due diligence, and contract renewal processes.
Support responses to customer privacy and compliance questionnaires, audits, and due diligence requests.
Create and maintain customer-facing privacy documentation, notices, disclosures, and materials explaining our privacy and data protection practices.
Partner with Marketing and Communications teams to ensure compliance with privacy requirements related to websites, cookies, tracking technologies, consent management, and marketing campaigns.
Advise on privacy and compliance considerations for data management, data governance, and information lifecycle initiatives.
Support the negotiation and review of privacy, data protection, confidentiality, and security provisions in customer, supplier, and partner agreements.
Assist with Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), transfer impact assessments, and other privacy risk assessments.
Monitor developments in global privacy, cybersecurity, AI, and data-related regulations, and help implement necessary updates to policies, processes, and controls.
Collaborate with cross-functional stakeholders to identify privacy risks and develop practical, business-oriented solutions.
Requirements
Bachelor's degree in Law, Compliance, Business, Information Governance, or a related field.
5–7+ years of experience in privacy, data protection, compliance, legal, risk, or data governance functions.
Strong understanding of GDPR and European privacy and data protection requirements.
Experience supporting privacy programs in a regulated or complex data-processing environment.
Ability to translate regulatory requirements into practical business guidance.
Excellent drafting, communication, stakeholder management, and project coordination skills.
Strong analytical mindset with attention to detail and a proactive approach to problem-solving.
Comfortable working independently while collaborating across multiple teams and jurisdictions.