Job Description
Our client, a global consumer technology company, is looking for an interim global director of privacy to join for a 12 month engagement (possible extension too).
The ideal candidate will have at least 10 years leading privacy programs spanning EU/UK/US in a consumer-facing tech environment.
Key day to day responsibilities include:
* Own incident readiness & response: Drive end-to-end breach management—investigation workflows, notification determinations, regulator engagement, and post-incident remediation—while clarifying roles across Legal, InfoSec, Product, and Engineering
* Build scalable global privacy compliance: design pragmatic, cross-functional privacy controls aligned to GDPR/UK DPA and US state laws (e.g., CCPA/CPRA), and roll out program artifacts that teams can operate day-to-day.
* Own core GDPR Documentation: maintain and improve records and assessments, and lead contracting on DPAs with vendors.
* Operationalize privacy-by-design: partner with engineering and product to integrate safeguards early in the lifecycle and establish clear accountability for incident preparedness and escalation.
* Lead regulatory & member data matters: coordinate responses to member privacy requests and manage regulator inquiries across the US/UK/EU in concern with support and legal operations.
* Coach & Enablement: develop policies, playbooks, templates, and trainings that raise awareness and drive consistent execution; mentor privacy team members to elevate program impact.
* Manage a privacy advisor, supporting their growth and ensuring alignment with global privacy objectives.
Key qualifications Include:
* Deep experience: 10+ years leading privacy programs spanning EU/UK and US in a consumer-facing tech environment, working on platform technology, and handling sensitive consumer data.
* Program operations: proven ownership of GDPR operational artifacts (ROPA/DPIAs/lawsul basis) and US state compliance frameworks; able to turn policy into scalable workflows.
* Incident leadership: Track record leading cross-functional incident preparedness and breach response, including regulator engagement and remediation planning.
* hands-on experience negotiating privacy provisions and DPAs
* Availability and presence: ability to start within the next two weeks and is okay with travel
This role can be fully remote.
Please contact: gbalasubrama@mlaglobal.com for further details on this.