Data Privacy Officer

Role & responsibilities

Demonstrates strong understanding of global and regional privacy and data protection regulations, including GDPR, CCPA, CPRA, LGPD, PIPEDA, HIPAA/HITECH, COPPA, U.S. State Breach Disclosure Laws, CAN-SPAM, GLBA, and other sectoral or jurisdiction-specific requirements.

• Applies leading privacy and security frameworks such as NIST, ISO 27001, ISO 27701, GAPP, and privacy-by-design principles to assess privacy maturity, design controls, and recommend practical remediation roadmaps.
• Leads privacy technology strategy, tool selection, solution design, implementation planning, configuration oversight, testing, rollout, and adoption for privacy management ecosystems.
• Provides techno-functional guidance across privacy use cases such as records of processing activities, data mapping, DPIAs/PIAs, DSAR automation, consent and preference management, cookie governance, third-party risk management, breach response workflows, retention, data discovery, and regulatory reporting.
• Has hands-on and oversight experience with privacy technology platforms such as OneTrust, BigID, Collibra, Securiti AI, TrustArc, or similar platforms, with the ability to translate business, legal, and regulatory requirements into system configuration and operating processes

Leads solution integration discussions between privacy platforms and enterprise technologies such as CRM, ERP, HRMS, marketing automation, identity and access management, data catalogs, data warehouses, analytics platforms, ticketing tools, and cloud environments.

• Demonstrates working knowledge of APIs, SDKs, tag managers, event-based integrations, data ingestion pipelines, and reporting interfaces, with the ability to guide technical teams on integration requirements without being solely responsible for coding or development.
• Reviews and validates solution architecture, integration design, workflow configuration, test plans, defect resolution, deployment readiness, change management, and post-implementation support for privacy technology projects.
• Understands technical safeguards such as encryption, masking, pseudonymization, tokenization, access control, data minimization, retention controls, and logging, and can align these safeguards with privacy risk mitigation and compliance requirements.
• Brings experience in cookie and consent management, including implementation of consent management platforms, preference centers, Google Tag Manager, website scanning, cookie classification, consent signal capture, and integration with marketing or analytics ecosystems.
• Possesses experience applying automation, analytics, workflow optimization, and Generative AI to improve privacy processes such as intake triage, DSAR handling, regulatory assessment, privacy impact assessment, control monitoring, reporting, and knowledge management.
• Demonstrates working knowledge of artificial intelligence, machine learning, Generative AI, and large language model concepts, including model lifecycle, prompt design, retrieval-augmented generation, model inventories, training data

considerations, human-in-the-loop controls, AI risk classification, and responsible AI governance expectations.

• Understands privacy risks associated with AI and LLM-enabled solutions, including personal data exposure, sensitive data leakage, prompt injection, over-retention of prompts and outputs, model explainability, bias, transparency, automated decision-making, consent, data minimization, and cross-border data transfer considerations.
• Supports the integration of privacy technology tools with AI governance, data governance, security, and enterprise risk platforms to enable centralized inventories, risk assessments, automated workflows, evidence collection, reporting dashboards, and continuous monitoring of privacy and AI-related controls.
• Has exposure to configuring or advising on privacy technology integrations involving APIs, connectors, webhooks, data catalogs, consent management platforms, identity systems, cloud data platforms, model registries, AI governance tools, and enterprise reporting layers.

Preferred candidate profile