Director - Data Privacy Officer

Overview

This leadership position involves spearheading the development, implementation, and governance of an expansive global data privacy initiative to ensure organizational compliance with GDPR and pertinent privacy regulations worldwide.

Key Responsibilities

• Direct and manage the global data privacy program, defining its strategy, governance framework, policies, and compliance controls.
• Act as the leading expert on GDPR and other privacy legislation, translating legal mandates into operational requirements.
• Advise executive management and the Chief Compliance Officer on emerging privacy risks, enforcement trends, and compliance obligations.
• Design and enhance privacy governance forums and accountability models to enforce privacy standards consistently across operations and regions.
• Manage data processing records, inventories, retention protocols, and privacy safeguards to uphold audit and regulatory readiness.
• Oversee comprehensive risk assessments including privacy and data protection impact evaluations for business and technology initiatives.
• Integrate privacy by design principles across projects, digital platforms, analytics, HR processes, and vendor management.
• Partner effectively with Legal, IT, Cybersecurity, Procurement, HR, and Internal Audit teams to operationalize privacy requirements.
• Monitor adherence to privacy policies via audits and compliance checks, leading responses to data breaches including coordination with regulators and remediation efforts.
• Serve as liaison to regulatory bodies, supervisory authorities, and external counsel concerning privacy matters.
• Keep abreast of global privacy law developments and implement timely program enhancements.
• Develop privacy expertise within the organization, deliver tailored training, and foster awareness at all organizational levels.
• Report consistently to senior leadership on program maturity and effectiveness using metrics and strategic insights.

Qualifications

• Bachelor’s degree in Law, Information Governance, Cybersecurity, Business, Compliance, or related fields.
• Preferred certifications include CIPP/E, CIPP/M, CIPM, CIPT, or equivalents.
• Exceptional English language skills; proficiency in Spanish and Arabic is advantageous.
• At least 10 years’ experience in data privacy or related compliance/ legal roles with senior leadership exposure in multinational companies.
• Demonstrable expertise in implementing GDPR-focused privacy frameworks and managing cross-border data compliance.
• Proven success collaborating with senior executives and embedding privacy frameworks into business units and technology operations.
• Experience managing regulatory engagements, audits, and working with external legal counsel highly valued.
• Strong analytical, policy writing, communication, and leadership capabilities, effective at board and executive levels.