VP, Global Privacy – Data Protection Officer

Job Description

Lead a state-of-the-art data privacy program encompassing AI infrastructure, cloud, and SaaS platforms. Architect, execute, and refine a scalable global data privacy framework rooted in ISO 27701 and other globally recognized standards. Act as the primary expert on current and future global and regional privacy regulations like GDPR, CCPA/CPRA, LGPD, DPDP, PDPA, and APPI. Steer and uphold certification and compliance with the EU-US Data Privacy Framework (DPF). Direct and supervise Data Protection Impact Assessments (DPIAs) for both new and existing high-risk products, vendors, and internal workflows. Work in sync with Engineering, Product, and other cross-functional teams to ensure privacy controls are correctly woven into Product and other business applications. Head the privacy aspect of external audits (SOC2, ISO) and embody Saviynt’s privacy stance during customer-facing due diligence and security reviews. Team up with the Legal team to create, revise, and negotiate Data Processing Agreements (DPAs) and privacy-related terms in vendor and customer contracts. Assess the privacy practices of third-party processors to confirm they meet Saviynt’s data protection benchmarks. Take part in Incident Response efforts, guiding privacy-focused impact evaluations, and other linked response measures. Convert intricate regulations and legal directives into straightforward, functional guidance for product managers and engineers. Establish and run a Privacy Incident Reporting and Response protocol to tackle any Privacy incidents that might arise in different geographic zones. Oversee the complete process for Data Subject Access Requests (DSARs) and the "Right to be Forgotten" across all regions. Conceptualize and deliver impactful privacy awareness programs tailored to various departments.

Qualifications

1. Bachelor’s or Master’s degree in Law, Information Security, Data Protection, or a related field. 2. Extensive progressive experience in data privacy, data protection, or legal compliance or related areas. 3. Multiple years in a senior leadership role managing global privacy programs preferably in a SaaS or high-growth tech environment. 4. Proven track record of managing cross-border data transfer mechanisms and navigating conflicting regional privacy laws. 5. Ability to translate complex regulations and legal mandates into clear, actionable guidance for product managers and engineers to consume. 6. Experience presenting privacy roadmaps and security postures to enterprise- level customers and stakeholders.Exceptional problem-solving skills with the ability to assess risk appetite versus regulatory requirements.

Benefits

- Saviynt is an equal opportunity employer and we welcome everyone to our team.