Data Protection & Privacy Director

Role Overview We are seeking an experienced Data Protection & Privacy Director to lead enterprise-wide privacy and data protection programs, ensure compliance with data privacy regulations, and manage privacy risks across the organization. The role will oversee governance frameworks, regulatory compliance, incident response, and privacy awareness initiatives. Key Responsibilities Develop and maintain data protection policies, standards, and procedures. Lead Privacy Impact Assessments (DPIAs) and maintain Records of Processing Activities (ROPA). Design and implement privacy and data governance frameworks. Ensure compliance with PDPL, GDPR, CCPA, and other applicable regulations. Conduct privacy audits, risk assessments, and compliance reviews. Lead response activities for data breaches and privacy incidents. Manage Data Subject Access Requests (DSARs). Collaborate with Legal, IT, Security, and business teams on privacy initiatives. Drive privacy awareness and training programs across the organization. Requirements • Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field. Master's degree preferred. • 10+ years of experience in Data Protection, Privacy, Governance, Risk, or Cybersecurity. • Strong knowledge of privacy regulations including PDPL, GDPR, and CCPA. • Experience developing and implementing privacy governance frameworks. • Expertise in privacy risk assessments, audits, and compliance activities. • Strong stakeholder management and leadership skills.

Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field. Master's degree preferred. 10+ years of experience in Data Protection, Privacy, Governance, Risk, or Cybersecurity. Strong knowledge of privacy regulations including PDPL, GDPR, and CCPA. Experience developing and implementing privacy governance frameworks. Expertise in privacy risk assessments, audits, and compliance activities. Strong stakeholder management and leadership skills.

Develop and maintain data protection policies, standards, and procedures. Lead Privacy Impact Assessments (DPIAs) and maintain Records of Processing Activities (ROPA). Design and implement privacy and data governance frameworks. Ensure compliance with PDPL, GDPR, CCPA, and other applicable regulations. Conduct privacy audits, risk assessments, and compliance reviews. Lead response activities for data breaches and privacy incidents. Manage Data Subject Access Requests (DSARs). Collaborate with Legal, IT, Security, and business teams on privacy initiatives. Drive privacy awareness and training programs across the organization.