Director, Data Privacy Compliance

What you'll do

• Lead design, implementation, and ongoing maturation of global privacy compliance program across all business units and acquired platforms
• Serve as senior subject matter expert on federal, state, and international privacy laws and regulations
• Oversee privacy impact assessments, data mapping, and records of processing activities
• Manage privacy policy development and cross-platform privacy integration
• Lead incident response coordination for data breaches and privacy events
• Engage with business executives, clients, law enforcement, and opposing counsel
• Oversee compliance programs for TCPA, CAN-SPAM, and digital advertising regulations including IAB TCF
• Direct multi-state registration and licensing compliance programs
• Monitor and assess impact of emerging regulations including DSA, DORA, AI/ML governance frameworks, and new U.S. state privacy laws
• Develop and maintain compliance roadmaps with actionable timelines
• Manage and mentor compliance and legal operations team
• Partner with Legal Operations on process optimization and technology solutions
• Collaborate cross-functionally with Product, Engineering, Sales, and Marketing teams to embed privacy-by-design and compliance-by-default
• Prepare compliance reports and board-level materials
• Develop and maintain publisher and partner compliance onboarding materials and oversight

Requirements

• 8+ years of progressive experience in privacy, regulatory compliance, or related legal/compliance roles, preferably within marketing technology, AdTech, or a data-intensive industry
• Deep, demonstrated expertise in GDPR, CCPA/CPRA, and U.S. state privacy law landscape
• Strong knowledge of digital advertising regulations, consent frameworks (IAB TCF), and email/SMS marketing compliance (CAN-SPAM, TCPA)
• Proven track record of building and scaling compliance programs in a complex, multi-product environment
• Experience managing and developing compliance teams
• Excellent written and verbal communication skills, with the ability to translate complex regulatory requirements into clear, actionable business guidance
• Demonstrated ability to work effectively with cross-functional stakeholders at all levels of the organization
• Preferred: CIPP/US, CIPP/E, CIPM, or other relevant privacy certification (IAPP)
• Preferred: JD or advanced degree in law, compliance, or a related field
• Preferred: Experience with M&A integration from a privacy and compliance perspective
• Preferred: Familiarity with AI/ML governance frameworks and emerging regulatory requirements
• Preferred: Experience with publicly traded companies and associated governance obligations (e.g., SEC cybersecurity disclosure requirements)
• Preferred: Knowledge of international privacy regimes beyond GDPR (e.g., Australia, Singapore, Japan)
• Preferred: Previous experience working as in-house counsel, particularly at a tech startup

Benefits