Key Requirements:

• Education:

  • Bachelor’s degree in law, finance, business, or a related field (required)

  • Master’s degree or JD preferred

  • Relevant certifications: CCEP, CRCM, CAMS

• Experience:

  • 10+ years in a combination of data privacy, compliance, security governance, and technology risk, ideally within B2B services or technology

  • Leadership experience managing compliance, privacy, and risk teams

  • Experience with regulatory audits, investigations, and reporting

• Skills & Knowledge:

  • Strong grasp of privacy by design and operationalization, including DPIAs, DSRs, retention, and cross-border data transfers

  • Experience building auditable governance for automated decision systems or AI/ML deployments

  • Ability to translate legal and regulatory requirements into technical controls, applying a policy-as-code mindset

  • Deep understanding of regulatory frameworks relevant to the industry

  • Risk assessment and mitigation strategies

  • Policy development and enforcement expertise

• Communication & Leadership:

  • Strong executive communication; able to produce board- and client-ready materials

  • Ability to influence senior management and stakeholders

  • Strategic thinker with proactive approach

• Personal Attributes:

  • High ethical standards and integrity

  • Detail-oriented and able to navigate complex regulatory and technical environments