Data Privacy Officer (DPO)

Design, implement, and maintain a comprehensive privacy program aligned with global data protection frameworks (e.g., GDPR, CCPA/CPRA, LGPD) and industry best practices.

Develop and maintain privacy policies, procedures, standards, and playbooks; ensure documentation is current and accessible to relevant stakeholders.

Establish and chair cross-functional privacy governance forums to oversee data protection initiatives, risk remediation, and accountability mechanisms.

Conduct privacy risk assessments, DPIAs (Data Protection Impact Assessments), and vendor privacy reviews to identify and mitigate privacy risks associated with new and existing products, services, and third-party relationships.

Map data flows and maintain records of processing activities (RoPA); classify personal data and recommend appropriate retention, minimization, and protection measures.

Monitor regulatory developments and perform gap assessments against applicable legal requirements; drive remediation plans to achieve and sustain compliance.

Manage processes for handling data subject access requests, erasure requests, objection requests, and other privacy-related inquiries in accordance with legal timelines and internal SLAs.

Lead privacy aspects of incident response activities, coordinate cross-functional investigations for data breaches, assess risk, and advise on regulatory notification and remediation steps.

Oversee privacy-related vendor contracts, data processing agreements, and ensure appropriate technical and organizational measures are in place with third parties.

Develop and deliver privacy training, awareness campaigns, and role-based guidance to employees, contractors, and business partners.

Provide practical privacy advice to Product, Engineering, Marketing, HR, and other teams to enable privacy-by-design and privacy-friendly feature development.

Act as the primary internal advisor on privacy requirements for new projects, major releases, and cross-border data transfers.