Head of Global Data Privacy

Here at Syndigo, we're enabling our clients to deliver better eCommerce experiences. We've mastered the right data, right now. From creation to sale, that's the value our partners get from us - a holistic, truly differentiated end-to-end solution that closes the loop while increasing sales.

Basically, we're the accurate data behind how people feel when they shop online with confidence!

We cannot do all of this without our amazing people! Our employees make the magic happen here at Syndigo and we're growing rapidly! We're ready for you to collaborate with us to challenge the status quo!

We are seeking a highly motivated Head of Global Data Privacy to join our team. The Head of Global Data Privacy will be responsible for leading the development and implementation of Syndigo’s data privacy program including managing a team which spans both internal and external resources, keeping up to date with relevant data privacy laws, implementing updates based on new laws, client-facing and vendor-facing DPA negotiations. The Head of Global Data Privacy will work closely with cross-functional teams, including Sales, Marketing, Product, Infosec, Legal, and others to drive data privacy compliance and rapid turn around on customer facing DPAs.

Responsibilities:

• Work with the Privacy Team members (InfoSec, Legal and external DPO) and other key stakeholders within the company to implement, prioritize, and manage execution of privacy initiatives, primarily related to the GDPR/CCPA/PIPEDA

• Develop guidance and assist the company in identifying, implementing, and maintaining data protection policies and procedures in coordination with management, the Risk Committee, and the Legal department.

• Guide the products development team so that products conform to privacy-by-design principles.

• Review and advise on data protection clauses in contracts with the company’s clients and service providers and assist on contract execution.

• Maintain the Company’s records of processing updated.

• Help improve and optimize existing data protection operations.

• Serve as a point of contact for data protection-related queries from internal stakeholders, customers, data subjects and regulators.

• Perform Transfer Impact Assessments (TIAs).

• Update the Syndigo Intra-Group Data Transfer Agreement to reflect changes to processing operations and laws.

• Keep up to date with current data protection law developments and determine if changes to the Company’s data protection program needs to be updated.

• Identify the need for, and perform Data Protection Impact Assessments (DPIAs)

• Advise the Company in the event of personal data breaches

• Advise on the risk on certain data processing operations

• Review and revise terms of use and privacy policies

• Assists with responding to compliance audits, questionnaires, and/or reviews conducted by Company’s clients any internal audits or reviews conducted (including implementing, facilitating or monitoring any necessary resulting corrective actions to ensure completion)

• Assist with preparing status reports and other leadership updates and collecting program metrics

Requirements:

• Work experience: min. 3 years within a data protection function in a SaaS company with global coverage.

• Have a very good understanding of the requirements of the EU and UK GDPR, the CCPA, and Privacy Shield.

• Languages: fluent in English, both written and oral.

• Strong contract negotiation skills, both in writing and in meetings.

• Intermediate understanding of Internet technologies, including tracking technologies, and encryption technologies.

• More than 2 years involvement in a policy environment

• Relevant Data Protection and Privacy experience, in particular with respect to the Privacy Program reporting and analytics

• Advanced command of MS Excel, Teams, PowerPoint, SharePoint and Word.

• CIPP/E and CIPP/US certifications.

Nice-to-have:

• Experience working with data protection authorities and regulators in charge of enforcing privacy requirements.

• Knowledge of compliance management standards, tools, methodologies (experience of CookieBot would be advantageous).

• CIPM certification.

• Information security experience and certifications.

• Understanding of commonly used business tools such as Sharepoint, Google Analytics, Jira.

• Understanding of website development processes.

• Fluency in other European languages (German, Spanish, Dutch, French) are a bonus.

Skills:

• You communicate clearly in both drafting and orally and you also have strong presentation skills.

• You are a team player and have excellent organizational and interpersonal skills.

• You are able to work independently.

Offer:

• Remote work (Must be based out of the United States, UK, France, Germany, or Poland)

• You will lead a team and continue to build out a global privacy program.

• You will be offered an attractive remuneration package and challenging career opportunities.

If you are interested, please submit your CV in English.