Senior Director, Global Privacy & Data Protection
$255,000–$290,000 year
HybridNew York City, New York, United States or New York, United States
Job Summary
Lead global privacy strategy and serve as the designated Data Protection Officer for Europe, advising executive leadership on regulatory changes and strategic trade-offs. Build and mature privacy program operations, including PIAs, DPIAs, and incident readiness, while integrating privacy by design into product development and commercial contracting. Partner with Product, Engineering, Legal, and Sales teams to embed responsible data use, manage vendor agreements, and guide enterprise due diligence for customer engagements. This full-time, permanent hybrid role reports to the Chief Risk and Strategy Officer. We seek a commercially minded leader with 15+ years of experience in GDPR, U.S. state, and Canadian privacy laws to drive privacy by design across our platform that verifies over 5 billion people globally.
Required Qualifications
- 15+ years of experience in privacy, data protection, technology law, regulatory advisory, or related legal and risk leadership roles, including significant in-house experience
- Extensive expertise in GDPR, European data protection expectations, U.S. state privacy laws, and Canadian privacy laws
- Demonstrated ability to serve as a senior privacy leader or Data Protection Officer in a complex, global technology environment
- Experience advising Product, Engineering, Security, Legal, and go-to-market teams on privacy by design, data protection risk, product launches, and customer-facing commitments
- Practical experience with PIAs, DPIAs, data mapping, transfer mechanisms, DPAs, SCCs, vendor risk, data subject rights, retention, and privacy incident response
- Strong understanding of privacy issues tied to emerging identity technology and use cases including biometrics, identity, AI, behavior analysis, automated processing, fraud prevention, and device intelligence
- Track record building or maturing privacy program operations in agile, high-growth, regulated, or enterprise SaaS environments
- Executive presence, sound judgment, and the ability to translate regulatory complexity into clear business decisions
- Strong people leadership skills, with the ability to build capability, set direction, and raise the operating maturity of a privacy function
- Law degree or equivalent legal/privacy qualification
- Membership in good standing with a relevant law society or bar
Desired Qualifications
- Experience in RegTech, FinTech, identity verification, fraud prevention, payments, financial services, or enterprise SaaS
- Working knowledge of privacy and data protection frameworks in Asia-Pacific, India, China, and Latin America
- Experience supporting AI governance, responsible AI programs, model governance, or data ethics frameworks
- Familiarity with information security, data governance, cybersecurity, enterprise risk, or public-company readiness programs
- Privacy certifications such as CIPP/E, CIPP/US, CIPP/C, CIPM, CIPT, or equivalent credentials
- Experience speaking externally, publishing privacy insights, or representing a company in industry forums
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.