Skip to main content
Trulioo

Senior Director, Global Privacy & Data Protection

RemoteUnited States, Canada only
Published
Role
Security
Experience
Senior
Employment
Full-time
$255k–$290k/yr
Check eligibility

Open to US, CA only. Set where you work from to check your eligibility.

No BS summary

Senior privacy and data protection leader with 15+ years in privacy, technology law, regulatory advisory, or related legal/risk leadership. Must have deep GDPR, U.S. state privacy, and Canadian privacy law expertise, plus experience as a senior privacy leader or DPO in a complex global technology environment. Hybrid from a North American office or fully remote.

What you'll do

  • Build and lead Trulioo’s global privacy and data protection strategy across priority markets, products, customers, and operating environments.
  • Serve as Trulioo’s designated Data Protection Officer for Europe, providing independent, credible, and commercially practical advice on GDPR and related obligations.
  • Advise executive leadership on privacy risk, regulatory change, customer expectations, and strategic trade-offs tied to product innovation and market expansion.
  • Represent Trulioo in privacy-related engagements with regulators, enterprise customers, industry groups, and other external stakeholders.
  • Act as a strategic advisor on privacy and data protection implications as Trulioo expands into new operating regions, verticals, and the product catalog.
  • Monitor global privacy developments and translate implications into practical guidance for products, operations, market expansion, and customer commitments.
  • Mature Trulioo’s privacy program, including PIAs, DPIAs, records of processing, data subject rights, vendor privacy reviews, and cross-border transfer mechanisms.
  • Integrate privacy by design into product development, commercial contracting, customer onboarding, third-party management, enterprise risk management, and agile operating rhythms.
  • Own and evolve key privacy and data governance policies, including data retention, data classification, information classification and protection, data handling, and responsible data use.
  • Lead privacy incident readiness and response, including investigation support, breach assessment, regulatory notification analysis, remediation, and post-incident improvement.
  • Develop practical reporting, metrics, and executive-level insights that create visibility into privacy risks, regulatory readiness, and program maturity.
  • Partner with Product and Engineering to embed privacy by design into agile product development, architecture decisions, data flows, and release processes.
  • Provide guidance on privacy risks tied to identity verification, fraud prevention, biometrics, document verification, data enrichment, AI, machine learning, and emerging identity technologies.
  • Serve as a senior privacy advisor to Sales, Customer Success, Marketing, Solutions, and Legal in support of enterprise due diligence, RFPs, audits, and strategic customer engagements.
  • Help shape responsible AI governance, including privacy impact analysis, consumer data use, automated processing, transparency, and controls for responsible product deployment.
  • Lead or support negotiation of DPAs, SCCs, data transfer terms, privacy schedules, customer commitments, vendor terms, and partner arrangements.
  • Support commercialization by validating privacy positioning, customer-facing claims, contractual commitments, and market-specific privacy requirements.
  • Build privacy thought leadership that strengthens Trulioo’s credibility with customers, regulators, partners, and industry stakeholders.
  • Lead, coach, and develop a high-performing privacy team with strong judgment, business orientation, and operational discipline.
  • Create clear decision-making frameworks that allow teams to move quickly while managing privacy and data protection risk effectively.
  • Foster a culture of responsible innovation, practical risk management, and accountable data use across the organization.
  • Leverage AI and emerging technologies to improve productivity, enhance decision-making, and continuously optimize how work is performed.

What they require

  • 15+ years of experience in privacy, data protection, technology law, regulatory advisory, or related legal and risk leadership roles, including significant in-house experience.
  • Extensive expertise in GDPR, European data protection expectations, U.S. state privacy laws, and Canadian privacy laws.
  • Demonstrated ability to serve as a senior privacy leader or Data Protection Officer in a complex, global technology environment.
  • Experience advising Product, Engineering, Security, Legal, and go-to-market teams on privacy by design, data protection risk, product launches, and customer-facing commitments.
  • Practical experience with PIAs, DPIAs, data mapping, transfer mechanisms, DPAs, SCCs, vendor risk, data subject rights, retention, and privacy incident response.
  • Strong understanding of privacy issues tied to emerging identity technology and use cases including biometrics, identity, AI, behavior analysis, automated processing, fraud prevention, and device intelligence.
  • Track record building or maturing privacy program operations in agile, high-growth, regulated, or enterprise SaaS environments.
  • Executive presence, sound judgment, and the ability to translate regulatory complexity into clear business decisions.
  • Strong people leadership skills, with the ability to build capability, set direction, and raise the operating maturity of a privacy function.
  • Law degree or equivalent legal/privacy qualification; membership in good standing with a relevant law society or bar is strongly preferred.
  • Preferred: Experience in RegTech, FinTech, identity verification, fraud prevention, payments, financial services, or enterprise SaaS.
  • Preferred: Working knowledge of privacy and data protection frameworks in Asia-Pacific, India, China, and Latin America.
  • Preferred: Experience supporting AI governance, responsible AI programs, model governance, or data ethics frameworks.
  • Preferred: Familiarity with information security, data governance, cybersecurity, enterprise risk, or public-company readiness programs.
  • Preferred: Privacy certifications such as CIPP/E, CIPP/US, CIPP/C, CIPM, CIPT, or equivalent credentials.
  • Preferred: Experience speaking externally, publishing privacy insights, or representing a company in industry forums.

Benefits

  • Offers equity.
  • Offers bonus.
  • Health coverage for full-time, permanent employees.
  • Dental coverage for full-time, permanent employees.
  • Vision coverage for full-time, permanent employees.
  • Retirement plans with company match.
  • Paid time off.
  • Parental leave.
  • Annual education and training stipend equivalent to $1,000 in local currency.
  • Flexible hybrid working environment.
  • Weekly lunches.
  • Quality coffee.
  • Regular social events.
  • Parent rooms in many locations.
  • On-site gyms in many locations.
  • Comfortable lounges in many locations.
  • Adaptable workstations in many locations.
  • Wellness workshops and events.
  • Complimentary Headspace subscription.
  • Employee Resource Groups providing inclusive space, support, and community.
  • Transparent interview process.

Trulioo is a digital identity verification platform that enables organizations worldwide to onboard customers, optimize costs, combat fraud, and comply online.

🇨🇦 CanadaIdentity VerificationEnterprisetrulioo.com

Details

Apply routeDom
$255k–$290k/yr