Data Privacy & Privacy Governance Lead

About the role

We are looking for an experienced Privacy Governance professional to lead the design, implementation and continuous improvement of our enterprise privacy governance framework. The role ensures compliance with privacy regulations, data‑protection standards and internal policies while supporting broader information‑security and regulatory‑compliance initiatives.

Key responsibilities

• Design and implement an enterprise Privacy Governance Framework.
• Establish privacy policies, standards, procedures and operating guidelines.
• Conduct DPIAs, PIAs and maintain Records of Processing Activities (RoPA).
• Support Privacy‑by‑Design and Privacy‑by‑Default principles across projects.
• Perform data discovery, personal data mapping and review cross‑border transfer controls.
• Evaluate third‑party privacy compliance and manage data‑subject rights processes.
• Develop privacy awareness and training programs.
• Support internal and regulatory privacy audits and risk assessments.
• Recommend and implement privacy automation and GRC solutions.
• Maintain ISO 27701 and ISO 27001 management systems.

Required profile

• 5–8 years of experience in Information Security, Privacy or GRC.
• Hands‑on experience implementing privacy governance or management programs.
• Banking or Financial Services background preferred.
• Strong knowledge of ISO 27701, ISO 27001 and privacy frameworks.
• Bachelor’s degree in Computer Science, Information Security or a related discipline.

Required skills

• ISO 27701
• ISO 27001
• Privacy frameworks (e.g., GDPR, CCPA)
• GRC or privacy‑management platforms
• Data‑protection impact assessment methodologies