Data Privacy Specialist

Full-time

• Develop, review, and maintain privacy policies and procedures to ensure compliance with laws, regulations, and industry standards (e.g., GDPR, Data Act).
• Embed privacy considerations into product strategies and business operations, reviewing contracts and agreements (e.g., DPAs, NDAs) to ensure privacy controls are robust.
• Proactively identify privacy risks, monitor self-assessments, and recommend improvements to the privacy roadmap aligned with evolving business needs.
• Partner with cross-functional teams to address privacy gaps, translate risks into actionable projects, and lead initiatives for senior leadership, including the CTO.
• Present data-driven arguments to support privacy strategies, manage feedback effectively, and align decisions with privacy impact assessments (PIA) and business impact assessments (BIA).

• Minimum 3 years of experience in privacy/information security/GRC role.
• In-house experience and background in cybersecurity & compliance issues.
• Strong project management and cross-functional team management skills.
• Experience leading a project or agreement from conception to completion.
• Subject-matter expertise in data privacy laws, rules, regulations, and industry standards.
• Stay up to date with the latest regulatory changes and emerging privacy threats.
  
  Nice to have:
• Working knowledge of GDPR, CCPA, ISO, PCI DSS as well as international privacy, information security and data protection laws.
• Privacy/Information Security certifications.
• Experience in policy development, risk management frameworks, and privacy governance.
• Experience in handling audits and third-party assessments.