Director - Data Privacy Office

Responsible for leading the design, rollout, governance, and continuous enhancement of the organization’s global data privacy program, ensuring that personal data is processed in compliance with GDPR and other applicable privacy laws across all jurisdictions in which the company operates.
The role serves as the senior privacy leader and trusted advisor to executive management, embedding privacy by design into business operations, technology, third party relationships, and strategic initiatives while strengthening accountability, risk management, and regulatory readiness across a global enterprise.

Core Responsibilities

• Lead the enterprise-wide data privacy program for a global organization, establishing the strategy, governance model, policies, standards, and controls required to manage privacy risk effectively.

• Serve as the senior subject-matter expert on GDPR and other applicable privacy laws and regulations, translating legal requirements into practical business and operational controls.

• Act as the primary privacy advisor to the Chief Compliance Officer and senior leadership on strategic initiatives, emerging privacy risks, enforcement trends, and regulatory obligations.

Program Design, Rollout & Governance

• Design, implement, and mature a global data privacy program, including privacy governance forums, accountability structures, policies, procedures, notices, standards, and reporting mechanisms.

• Drive global rollout of privacy requirements across business units, functions, and geographies, ensuring consistent implementation while accommodating local legal and operational needs.

• Establish and maintain records of processing activities, data inventories, data retention standards, and privacy controls that support regulatory compliance and audit readiness.

Risk Assessment, Advisory & Operational Oversight

• Oversee privacy risk assessments, data protection impact assessments, transfer impact assessments, and control reviews for new and existing processing activities, products, systems, and business initiatives.

• Embed privacy by design and default into projects, digital platforms, data analytics use cases, HR processes, customer journeys, and vendor onboarding.

• Advise on lawful bases for processing, data subject rights, consent management, retention, anonymization, cookies, profiling, and cross-border data transfer mechanisms.

• Partner closely with Legal, Compliance, Cybersecurity, IT, Procurement, HR, Internal Audit, and business leaders to ensure privacy obligations are operationalized effectively.

Monitoring, Incident Response & Regulatory Engagement

• Monitor compliance with privacy laws, internal policies, and program standards through audits, reviews, metrics, and ongoing assurance activities.

• Lead or coordinate the privacy response to personal data incidents and breaches, including assessment, escalation, regulatory notification support, remediation, and lessons learned.

• Act as a key point of contact for regulators, supervisory authorities, auditors, and external counsel on privacy-related matters.

• Track developments in global privacy regulation and enforcement, assess organizational impact, and drive timely enhancements to the privacy framework.

Culture, Training & Leadership

• Build and lead privacy capability within the organization, including developing team members, defining accountability, and strengthening privacy awareness across all levels.

• Develop and deliver targeted privacy training and communication programs for executives, control functions, and high-risk business areas.

• Provide regular updates, metrics, and strategic recommendations to senior leadership on the maturity and effectiveness of the privacy program.