Director, Global Privacy Program

Job Summary

Responsibilities

• Coordinate day‑to‑day execution and continuous improvement of Consilio’s global privacy and data‑protection program.
• Implement privacy governance processes, decision records, escalation pathways, and accountability mechanisms.
• Operate independently on day‑to‑day program execution, prioritizing work and escalating material legal, regulatory, client, or enterprise risk issues.
• Provide practical program support and operational guidance on GDPR, UK GDPR, U.S. state privacy laws, and other global privacy and data protection requirements.
• Track privacy, cybersecurity, AI, and data‑governance developments and prepare practical recommendations, roadmap updates, training, templates, notices, and operational control enhancements.
• Apply emerging AI laws, regulations, regulatory guidance, and company AI governance requirements to privacy program activities.
• Partner closely with Legal, Information Security, IT, Product, Operations, Sales, HR, and client‑facing teams to embed privacy‑by‑design into new products, services, client solutions, vendor relationships, and internal initiatives.
• Partner effectively with regional stakeholders, including EMEA Legal, Security, Operations, and client‑facing teams, to address GDPR, UK GDPR, cross‑border transfer, and other regional privacy requirements.
• Maintain, refresh, and mature core privacy program elements on an ongoing basis.
• Identify opportunities to automate privacy operations where practical.
• Develop and maintain global privacy policies, procedures, playbooks, templates, training, and communications.
• Support operational privacy risk review in commercial, client, vendor, supplier, and technology matters.
• Support privacy incident readiness and response.
• Maintain privacy program metrics, dashboards, control testing, remediation plans, and risk reporting inputs.
• Support regulatory inquiries, investigations, audits, and information requests.

Requirements

• Minimum 7+ years of relevant privacy, data protection, compliance, technology law, and/or privacy operations experience.
• Deep, practical knowledge of GDPR, UK GDPR, EMEA privacy requirements, U.S. state privacy laws, international transfer requirements, data governance, privacy operations, and privacy risk management.
• IAPP certification strongly preferred (CIPP/E and/or CIPP/US); CIPM, CIPT, or other recognized privacy, data protection, or security certifications are a plus.
• D., equivalent legal qualification, or comparable advanced privacy, compliance, or technology credential preferred.
• Excellent drafting, communication, and training skills.
• Strong business judgment and professional presence.
• Working familiarity with AI governance concepts and emerging AI regulatory frameworks.
• Ability to interpret regulatory guidance and enforcement trends and convert them into practical, risk‑based recommendations.
• Experience supporting interactions with privacy, data protection, or other relevant regulators.
• Significant experience improving and managing day‑to‑day privacy program operations.
• Experience building, scaling, maintaining, or materially improving privacy program components such as DPIAs/PIAs, data mapping, records of processing, privacy notices, consent and preference processes, DSARs, vendor privacy reviews, third‑party risk, training, audits, readiness assessments, and recurring control refresh processes.
• Demonstrated experience supporting EMEA operations and stakeholders.

Company Values

• Client Experience – We listen for the “why,” clearly define success, maintain accountability, and go the extra distance to create moments that matter.
• Collaboration – We treat everyone with respect, welcome diverse views, and partner across geographies, generations, and teams.
• Innovation – We are always curious, challenge the status quo, experiment to fail forward, and build for the future.
• Grit – We focus on what matters, work with passion and persistence, think like an owner, and deliver results we’re proud of.