Data Privacy Manager

In this role you will lead KLDiscovery's data protection program, ensuring global compliance with GDPR, UK DPA 2018, HIPAA, CCPA, and other privacy laws. You will be the go-to expert for data privacy, coordinating assessments, policies, and engagement with regulators and data subjects. You’ll drive DPIAs, LIAs, and cross-border transfer strategies, while supporting product and business initiatives. This position offers meaningful impact on client trust, security, and regulatory readiness in a global SaaS environment.

• competitive salary
• comprehensive benefits package
• remote work flexibility
• health and wellness programs
• paid time off and leave options
• professional development opportunities

• Monitor and advise on data protection compliance for clients and employees
• Lead and coordinate DPIAs, TIAs, LIAs; mitigate privacy risks for products and initiatives
• Maintain cross-border transfer compliance (DPF, Schrems II, etc.)
• Own Records of Processing Activities (ROPA) and privacy documentation
• Serve as primary liaison for data subjects and regulators; support breach response and regulatory reporting
• Deliver privacy training and awareness; support AI governance and EU AI Act readiness
• Assist in client RFPs and due diligence with data privacy insights

• Minimum 5 years in a dedicated privacy role in an international business (preferably SaaS)
• Degree in law, information security, IT, compliance, or related field
• Professional data protection/privacy certification (e.g., CIPP/E, CIPM, GDPR Practitioner)
• Expert knowledge of GDPR, UK DPA 2018, US state privacy laws, HIPAA; AI governance knowledge is a plus
• Ability to translate privacy requirements into operational guidance
• Strong communication, analytical and problem-solving skills
• Discretion and integrity with sensitive information

• Meticulous attention to detail
• Proactive and adaptable
• Independent and collaborative work style
• DPIA/LIAs/ROPA/data protection control design
• Data transfer mechanisms (DPF, Schrems II)
• Regulatory reporting and incident response guidance