CrawlJobs Logo

Data Privacy Lead

· Job Posted March 21, 2026
Apply Position
Job Link Share

Job Description

We are seeking a highly skilled and proactive Data Privacy Lead for the EMEA region to oversee and manage data protection and privacy compliance across multiple jurisdictions. This role requires expertise in GDPR, as well as a strong understanding of regional data privacy laws and practices. The successful candidate will play a key role in shaping and implementing privacy strategies, ensuring regulatory compliance, and supporting business operations with practical, risk-based advice.

Job Responsibility

  • Lead the development and execution of data privacy strategies across the EMEA region
  • Ensure ongoing compliance with GDPR and other applicable data protection laws
  • Act as a subject matter expert and advisor to business units on privacy-related matters
  • Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs)
  • Manage and respond to data subject access requests (DSARs) and regulatory inquiries
  • Monitor changes in privacy legislation across EMEA and assess business impact
  • Collaborate with Legal, IT, HR, and security teams to embed privacy by design and default
  • Develop and deliver privacy training and awareness programs across the region
  • Maintain records of processing activities and oversee data mapping initiatives
  • Support incident response and breach notification processes in line with regulatory requirements

Requirements

  • Degree in Law, Compliance, Data Protection, or a related field
  • Minimum 3-5 years of experience in data privacy, with a strong focus on GDPR
  • In-depth knowledge of EMEA data protection laws and regulatory frameworks
  • Professional certification preferred (e.g., CIPP/E, CIPM, or similar)
  • Experience working in a multinational environment with cross-border data flows
  • Strong analytical, communication, and stakeholder engagement skills
  • Fluent in English
  • additional European languages are a plus

Nice to have

  • Strategic thinker with a hands-on, pragmatic approach
  • Ability to translate complex legal requirements into actionable business practices
  • Comfortable working in a fast-paced, matrixed organization
  • High integrity and commitment to ethical standards

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Similar Jobs for

Data Privacy Lead

8 matching positions

Data Privacy Lead Analyst

Location
Location
Hungary , Budapest
Salary
Salary:
14768850.00 - 24762350.00 HUF / Year
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 6-10 years of relevant experience
  • Demonstrates Data Privacy, Data Privacy Operations, Information Security or Cyber related risk management experience or minimum two years in an Internal Audit, Risk Management, or Control Management related role
  • Working knowledge of Data Privacy Compliance laws, rules, regulations, risks, and appropriate controls
  • Familiarity with privacy related technology considerations such as cookies, mobile devices, biometric and geolocation data is desired
  • Risk-based thinking and analytical mindset
  • Ability to lead and drive controls across the products and functions irrespective of reporting lines
  • Communicates effectively, develops and delivers multi-mode communications that convey a clear understanding of the unique needs of different audiences
  • able to drive consensus, and influence relationships at all levels
  • Collaborates effectively by building partnerships and working well with others to meet shared objectives
  • Up-to-date understanding of key data privacy risk and control concepts, tools and trends
Job Responsibility
Job Responsibility
  • Assess, evaluate, and validate controls through processes and tools such as the MCA and KRIs as appropriate for data privacy risk
  • Support the Business and Functions on reviews and audits on Data Privacy and Cross Border Data Transfers
  • Support the business on reviewing and responding to findings by reviewers
  • Manage day to day activities that support implementation of global policy requirements and regional standards, and on the assessment of the legal and regulatory requirements with Country Legal and Compliance as well as the development of local procedures as relate to Cross Border and Data Privacy
  • Coordinate periodic reviews of the Business's data privacy processes, Cross border data transfers and control and validate changes as a result of such reviews
  • Track and review deviations and risk acceptances when raised and at the time of renewal to assess the need for deviations and ascertain that the business has implemented and documented effective compensating controls
  • Follow Escalation Policy and procedures to ensure effective escalation and socialization of material risk events and issues across businesses for any data privacy related items
  • Provide input and review of completed Cross Border Data Clearance CAPs in the tracking system prior to validation by other control and assessment functions such as Internal Audit and ORM
  • Coordinate and support the Business in the implementation of global, regional and local Data Privacy, regulatory and risk and control projects
  • Ensure high quality execution for Data Privacy and Cross Border Data Transfer programs for any Citi initiated programs, in coordination with Global Risk and Control and the In Business Regulatory Engagement Head
What we offer
What we offer
  • Cafeteria Program
  • Home Office Allowance (for colleagues working in hybrid work models)
  • Paid Parental Leave Program (maternity and paternity leave)
  • Private Medical Care Program and onsite medical rooms at our offices
  • Pension Plan Contribution to voluntary pension fund
  • Group Life Insurance
  • Employee Assistance Program
  • Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
  • Flexible work arrangements to support you in managing work - life balance
  • Career progression opportunities across geographies and business lines
  • Fulltime
Read More
Arrow Right

Data Privacy Lead Analyst – Vice President

The Data Privacy Lead Analyst is responsible for facilitating/ executing the day...
Location
Location
India , Pune
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 6-10 years of relevant experience
  • Demonstrates Data Privacy, Data Privacy Operations, Information Security or Cyber related risk management experience or minimum two years in an Internal Audit, Risk Management, or Control Management related role
  • Working knowledge of Data Privacy Compliance laws, rules, regulations, risks, and appropriate controls
  • familiarity with privacy related technology considerations such as cookies, mobile devices, biometric and geolocation data is desired
  • Risk-based thinking and analytical mindset
  • Ability to lead and drive controls across the products and functions irrespective of reporting lines
  • Communicates effectively, develops and delivers multi-mode communications that convey a clear understanding of the unique needs of different audiences
  • able to drive consensus, and influence relationships at all levels
  • Collaborates effectively by building partnerships and working well with others to meet shared objectives
  • Up-to-date understanding of key data privacy risk and control concepts, tools and trends
Job Responsibility
Job Responsibility
  • Engages in assessment of Privacy impact processes and controls required for all initiatives, new products and services
  • Assess, evaluate, and validate controls through processes and tools such as the MCA and KRIs as appropriate for data privacy risk
  • Support the Business and Functions on reviews and audits on Data Privacy
  • Support the business on reviewing and responding to findings by reviewers
  • Manage day to day activities that support implementation of global policy requirements and regional standards, and on the assessment of the legal and regulatory requirements with Country Legal and Compliance as well as the development of local procedures as relate to Data Privacy
  • Coordinate periodic reviews of the Business’s data privacy processes and control and validate changes as a result of such reviews
  • Track and review deviations and risk acceptances when raised and at the time of renewal to assess the need for deviations and ascertain that the business has implemented and documented effective compensating controls
  • Follow Escalation Policy and procedures to ensure effective escalation and socialization of material risk events and issues across businesses for any data privacy related items
  • Assist business in creation of Issues/CAPs related to data privacy as needed (issues and CAPs owned by Product/Region business owner)
  • Track and escalate as necessary
  • Fulltime
Read More
Arrow Right

Lead Counsel, Data Privacy

You will join as Senior Lead Counsel, Data & Privacy, with primary responsibilit...
Location
Location
United States , San Francisco; New York
Salary
Salary:
180000.00 - 270000.00 USD / Year
airwallex.com Logo
Airwallex
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • U.S. legal qualification (or foreign equivalent) and active license to practice in at least one US jurisdiction
  • 8 years of experience in an in‑house legal department and/or in private practice advising on technology, data and privacy issues related to technical platforms and products
  • Strong knowledge of US federal and state privacy and data‑security laws (such as CCPA/CPRA and GLBA/Reg P) and how they intersect with payments and broader financial‑services regulation, plus working knowledge of GDPR and Canadian/South American privacy requirements (such as LGPD)
  • Experience providing guidance on US related privacy adtech requirements and technologies, including varying consent frameworks under US state privacy laws, and operationalizing consent management requirements
  • Demonstrated experience partnering with technical teams (Product, Engineering, Information Security) to translate legal and regulatory requirements into practical technical designs, controls, and processes
  • Demonstrated experience advising on emerging US and global AI legal requirements and AI‑governance best practices, and experience advising on AI/ML tools, vendors, or products from a privacy and data‑protection perspective
  • Experience providing data and privacy legal support during security or privacy incidents, including incident assessment, notification analysis, and remediation planning
  • Excellent written and verbal communication skills, with the ability to explain complex legal concepts to non‑lawyers and senior executives, and to drive clear decisions in ambiguous, time‑sensitive situations
  • High degree of ownership, resilience, and pragmatism
  • comfortable working in a fast‑paced, high‑growth fintech environment and managing multiple complex matters in parallel
Job Responsibility
Job Responsibility
  • Serve as lead data and privacy counsel for the US and Americas region, providing risk‑based, business‑oriented advice on US, Canada, and South American, data protection, AI and cybersecurity issues (including cross‑border access and national‑security‑adjacent topics), grounded in global data protection regulation and frameworks
  • Spearhead AI governance development and implementation globally, providing guidance on relevant global and US AI frameworks and executing a fit-for-purpose AI governance approach at Airwallex, including developing and implementing AI policies, procedures, privacy-related AI mitigations, and accountability frameworks
  • Develop and help execute privacy and data protection compliance programs for the Americas, specifically focused on compliance with US federal and state consumer financial privacy frameworks (GLBA, FCRA, CalFIPA) compliance, Executive Order 14117, and comprehensive state privacy compliance
  • Partner closely with Product, Engineering, Information Security, Regulatory Legal, Regulatory Compliance, Commercial Legal and Risk to embed privacy‑ and security‑by‑design in product development, technical architecture, UX, and go‑to‑market, including by spearheading DPIAs/PIAs, AI risk assessments, and other privacy impact assessments
  • Draft, review, and negotiate complex data protection and data‑sharing terms (including DPAs, cross‑border transfer terms, and AI‑related clauses) with customers, vendors, financial partners, and other third parties, acting as an escalation point for high‑risk matters
  • Coordinate and oversee international data flows touching the Americas, ensuring appropriate transfer tools and governance (e.g. SCCs or equivalent), and supporting initiatives on data localisation, storage, and access controls
  • Co‑lead the privacy and data‑protection workstream for security and data incidents related to the Americas with Information Security and other stakeholders, including triage, investigation, regulatory and customer notifications, remediation, and lessons learned
  • Advise on high‑risk or novel processing activities (e.g. new AI use cases, advanced analytics, innovative platform and embedded‑finance data models), helping structure appropriate safeguards, governance, and documentation
  • Support interactions with US and Americas regulators and policymakers on privacy, cybersecurity, data‑access and related topics, in close coordination with Regulatory Legal and Regulatory Compliance
  • Help build and refine tools and processes for privacy workflows (e.g., intake, assessment, DPIA/PIA/DPIA for AI, ROPA, DSRs), including the use of specialist tooling, metrics, and dashboards to track and evidence compliance
What we offer
What we offer
  • Offers Equity
  • Offers Bonus
  • medical, dental, and vision insurance
  • a 401(k) plan
  • short-term and long-term disability
  • basic life insurance
  • well-being benefits
  • 20 paid days of vacation
  • 12 paid days of company holidays
  • Fulltime
Read More
Arrow Right

Lead Counsel, Data Privacy

You will join as Senior Lead Counsel, Data & Privacy, with primary responsibilit...
Location
Location
United States
Salary
Salary:
160000.00 - 250000.00 USD / Year
airwallex.com Logo
Airwallex
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • U.S. legal qualification (or foreign equivalent) and active license to practice in at least one US jurisdiction
  • 8 years of experience in an in‑house legal department and/or in private practice advising on technology, data and privacy issues related to technical platforms and products
  • Strong knowledge of US federal and state privacy and data‑security laws (such as CCPA/CPRA and GLBA/Reg P) and how they intersect with payments and broader financial‑services regulation, plus working knowledge of GDPR and Canadian/South American privacy requirements (such as LGPD)
  • Experience providing guidance on US related privacy adtech requirements and technologies, including varying consent frameworks under US state privacy laws, and operationalizing consent management requirements
  • Demonstrated experience partnering with technical teams (Product, Engineering, Information Security) to translate legal and regulatory requirements into practical technical designs, controls, and processes
  • Demonstrated experience advising on emerging US and global AI legal requirements and AI‑governance best practices, and experience advising on AI/ML tools, vendors, or products from a privacy and data‑protection perspective
  • Experience providing data and privacy legal support during security or privacy incidents, including incident assessment, notification analysis, and remediation planning
  • Excellent written and verbal communication skills, with the ability to explain complex legal concepts to non‑lawyers and senior executives, and to drive clear decisions in ambiguous, time‑sensitive situations
  • High degree of ownership, resilience, and pragmatism
  • comfortable working in a fast‑paced, high‑growth fintech environment and managing multiple complex matters in parallel
Job Responsibility
Job Responsibility
  • Serve as lead data and privacy counsel for the US and Americas region, providing risk‑based, business‑oriented advice on US, Canada, and South American, data protection, AI and cybersecurity issues (including cross‑border access and national‑security‑adjacent topics), grounded in global data protection regulation and frameworks
  • Spearhead AI governance development and implementation globally, providing guidance on relevant global and US AI frameworks and executing a fit-for-purpose AI governance approach at Airwallex, including developing and implementing AI policies, procedures, privacy-related AI mitigations, and accountability frameworks
  • Develop and help execute privacy and data protection compliance programs for the Americas, specifically focused on compliance with US federal and state consumer financial privacy frameworks (GLBA, FCRA, CalFIPA) compliance, Executive Order 14117, and comprehensive state privacy compliance
  • Partner closely with Product, Engineering, Information Security, Regulatory Legal, Regulatory Compliance, Commercial Legal and Risk to embed privacy‑ and security‑by‑design in product development, technical architecture, UX, and go‑to‑market, including by spearheading DPIAs/PIAs, AI risk assessments, and other privacy impact assessments
  • Draft, review, and negotiate complex data protection and data‑sharing terms (including DPAs, cross‑border transfer terms, and AI‑related clauses) with customers, vendors, financial partners, and other third parties, acting as an escalation point for high‑risk matters
  • Coordinate and oversee international data flows touching the Americas, ensuring appropriate transfer tools and governance (e.g. SCCs or equivalent), and supporting initiatives on data localisation, storage, and access controls
  • Co‑lead the privacy and data‑protection workstream for security and data incidents related to the Americas with Information Security and other stakeholders, including triage, investigation, regulatory and customer notifications, remediation, and lessons learned
  • Advise on high‑risk or novel processing activities (e.g. new AI use cases, advanced analytics, innovative platform and embedded‑finance data models), helping structure appropriate safeguards, governance, and documentation
  • Support interactions with US and Americas regulators and policymakers on privacy, cybersecurity, data‑access and related topics, in close coordination with Regulatory Legal and Regulatory Compliance
  • Help build and refine tools and processes for privacy workflows (e.g., intake, assessment, DPIA/PIA/DPIA for AI, ROPA, DSRs), including the use of specialist tooling, metrics, and dashboards to track and evidence compliance
What we offer
What we offer
  • Offers Equity
  • Offers Bonus
  • medical, dental, and vision insurance
  • a 401(k) plan
  • short-term and long-term disability
  • basic life insurance
  • well-being benefits
  • 20 paid days of vacation
  • 12 paid days of company holidays in a calendar year
  • Fulltime
Read More
Arrow Right
New

Lead Privacy Counsel, Infrastructure & Data Governance

We are seeking a strategic, pragmatic, and proactive Privacy Counsel to join our...
Location
Location
United States
Salary
Salary:
Not provided
mozilla.org Logo
Mozilla
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • J.D. degree and membership in a state bar with good standing (or foreign equivalent)
  • 8+ years of relevant legal experience, including substantial experience advising on global privacy and data governance matters as in-house counsel
  • Demonstrated experience building and maintaining privacy compliance infrastructure, including data mapping, records of processing activities, governance frameworks, risk rubrics, and operational privacy processes
  • Demonstrated ability to operate independently, take ownership of complex cross-functional initiatives, and drive practical, scalable outcomes in a fast-paced environment
  • Ability to drive impact, outcomes and engagement using limited resources to get results
  • Established ability to balance multiple projects simultaneously and build consensus across cross-functional teams
  • Excellent written and verbal communication with ability to distill nuanced concepts into concise messages, write and edit for a variety of audiences (ranging from junior engineers to senior executives), and deliver polished presentations
Job Responsibility
Job Responsibility
  • Lead the development, implementation, and ongoing maintenance of Mozilla's core privacy compliance infrastructure, including enterprise data mapping and records of processing activities
  • Independently drive complex cross-functional privacy initiatives and operationalize scalable governance processes with minimal oversight
  • Evaluate and advise on evolving U.S., European, and international privacy and AI related regulatory developments and industry guidelines relevant to enterprise operations and internal data governance
  • Design and operationalize scalable global privacy compliance processes, controls, and documentation frameworks across Mozilla's internal systems and enterprise functions
  • Manage and advise on third-party privacy risk assessments, including vendor DPIAs, LIAs,TIAs, and related due diligence processes, using a scalable approach to manage and mitigate risk
  • Support and help manage Mozilla's privacy Mozilla's privacy incident response program, including triage, risk assessment, escalation management, documentation, and remediation coordination
  • Develop scalable training, intake, and operational processes to improve organizational privacy maturity and reduce friction for internal stakeholders, including by maintaining and implementing a robust privacy risk framework
  • Provide privacy advice in M&A transactions and post-close integration activities
What we offer
What we offer
  • Generous performance-based bonus plans to all eligible employees
  • Rich medical, dental, and vision coverage
  • Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute)
  • Quarterly all-company wellness days where everyone takes a pause together
  • Country specific holidays plus a day off for your birthday
  • One-time home office stipend
  • Annual professional development budget
  • Quarterly well-being stipend
  • Considerable paid parental leave
  • Employee referral bonus program
  • Fulltime
Read More
Arrow Right

Wealth Business Risk and Controls Lead – Branch & Service Organization, Data, Privacy, Sales Practices

Individuals in Risk Assessment & Control design are responsible for developing, ...
Location
Location
United Arab Emirates , Dubai
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Minimum of 8 -10 years of experience in operational risk management, compliance, audit, or other control-related functions in the financial services industry
  • Ability to identify, measure, and manage key risks and controls
  • Strong knowledge in the development and execution for controls
  • Proven experience in control related functions in the financial industry
  • Proven experience in implementing sustainable solutions and improving processes
  • Understanding of compliance laws, rules, regulations, and best practices
  • Understanding of Citi’s Policies, Standards, and Procedures
  • Strong analytical skills to evaluate complex risk and control activities and processes
  • Strong verbal and written communication skills, with a demonstrated ability to engage at the senior management level
  • Strong problem-solving and decision-making skills
Job Responsibility
Job Responsibility
  • Oversight over Branch Services: Develop, implement, and maintain a comprehensive framework for oversight of all Branch Services
  • Review and approves Branch processes to ensure the adequacy of control design and alignment with Local Regulatory requirements and expectation as well as Citi Global Policies and Procedures
  • Provide guidance and support on gapping analysis and impact assessment as part of the Regulatory Change Management
  • Monitor branch activities and practices to ensure adherence to internal policies, ethical standards, and regulatory requirements
  • Conduct periodic reviews and risk assessments of branch processes and customer interactions to identify potential risks
  • Provide guidance and support to branch teams on best practices and compliant branch service methodologies
  • Oversee the entire issue lifecycle
  • Collaborate with issue owners and relevant stakeholders to define clear, measurable, and time-bound remediation plans
  • Conduct post-implementation reviews to confirm the effectiveness and sustainability of implemented corrective actions
  • Partner with Branches to ensure adequacy of Managers Control Assessment covering key branch controls
  • Fulltime
Read More
Arrow Right

Privacy, Data Transfers and Records Management Risk and Strategy Lead

The Privacy, Data Transfers and Records Management Risk and Strategy Lead is pri...
Location
Location
United Kingdom , Belfast
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 10+ years of relevant experience in management consulting, strategy consulting or risk management, including experience overseeing functional operations
  • Strong understanding and experience with governance programs and risk appetite frameworks
  • Demonstrated ability to execute strategic initiatives and drive business value
  • In-depth knowledge of risk and control frameworks
  • Communicates effectively, develops and delivers multi-mode communications that convey a clear understanding of the unique needs of different audiences
  • able to drive consensus, and influence relationships at all levels
  • Collaborates effectively by building partnerships and working well with others to meet shared objectives
  • Ability to gain confidence and trust of others through honesty, integrity and authenticity
  • Strong negotiation, influencing and stakeholder management skills across a variety of stakeholders at different levels
  • Optimizes work processes by balancing effective / efficient processes with a focus on continuous improvement. Demonstrates ability to balance between understanding the “big picture” while paying close attention to detail
Job Responsibility
Job Responsibility
  • Responsible for overseeing and coordinating 1LoD risk appetite activities for the IMPaCT Function
  • Responsible for overseeing the IMPaCT functions business execution activities, including financial management, communications and compliance with Citi risk and controls frameworks
  • Deliver the IMPaCT Functions enterprise risk appetite metic strategy (including metric production activities where required) and coordinate with multiple teams across the IMPaCT function to ensure effective processes
  • Influences and negotiates with senior leaders (across multiple functions)
  • Collaborate with Technology, Operations, Information Security, Risk management, Compliance and other organizations across Citi to develop and implement effective solutions and process delivery, including technology investment request optimization for IMPaCT technology solutions
  • Preparation of clear, accurate and timely reports and escalations on risks, risk mitigation measures and compliance activities
What we offer
What we offer
  • 27 days annual leave (plus bank holidays)
  • A discretional annual performance related bonus
  • Private Medical Care & Life Insurance
  • Employee Assistance Program
  • Pension Plan
  • Paid Parental Leave
  • Special discounts for employees, family, and friends
  • Access to an array of learning and development resources
  • Fulltime
Read More
Arrow Right

Head of Data Privacy & Data Regulatory Compliance

To lead and integrate the strategic and operational delivery of data privacy com...
Location
Location
United States , New York
Salary
Salary:
215000.00 - 280000.00 USD / Year
barclays.co.uk Logo
Barclays
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Evidencable knowledge and skills in Financial Services, specifically Investment Banking
  • Successful track record of implementing data management strategy and framework in an automated, tooling led environment
  • Good understanding of data management tooling, architecture, and application into financial services
  • Strong stakeholder influencing and communication skills
  • Leadership and delivery within a global, matrix delivery environment
Job Responsibility
Job Responsibility
  • Lead and integrate IB-wide data privacy and records management strategy and operations, ensuring compliance with legal, regulatory, and business requirements
  • Act as senior control owner for data privacy and records management, embedding strong governance, risk, and control frameworks
  • Oversee all data privacy activities, including DPIAs, RoPAs, privacy control reviews, and maintenance of privacy notices
  • Drive data privacy awareness, training, and cultural adoption across the IB
  • Govern classification, retention, storage, and disposal of records in line with Group Data & Records policies
  • Lead records assurance activities (Records TSA, RTS workshops) and manage inventories, action logs, and remediation
  • Shape and influence the IB-wide data strategy, operating model, simplification initiatives, and tooling enhancements
  • Drive transformation of the function through data-led, technology-enabled approaches aligned to industry best practice
  • Represent IB CDAO in cross-functional forums and external regulatory/legal engagements
  • Provide regional leadership for the US, acting as primary point of contact and ensuring alignment with global objectives and regulatory expectations
  • Fulltime
Read More
Arrow Right