Director, Corporate Compliance

Key Responsibilities

• Develop, implement, and maintain the corporate compliance program, policies, and training
• Monitor regulatory developments and assess business impact across jurisdictions
• Conduct internal investigations and compliance audits; recommend remediation
• Advise business units on codes of conduct, anti-corruption (FCPA/UK Bribery Act), conflicts of interest, and whistleblower matters
• Track and report compliance metrics to leadership and the board, as appropriate
• Support M&A due diligence related to privacy, security, and compliance risk

Data Privacy

• Advising on compliance with global privacy laws (GDPR, CCPA/CPRA, state privacy laws, PIPEDA, and other applicable frameworks)
• Draft, review, and negotiate data processing agreements (DPAs), data sharing agreements, and privacy-related contract terms
• Conduct and oversee privacy impact assessments (PIAs/DPIAs) and data mapping exercises
• Manage data subject rights requests and privacy incident response
• Maintain and update privacy policies, notices, and internal governance documentation

Cybersecurity

• Advise on cybersecurity legal obligations, including breach notification laws and sector-specific requirements (e.g., GLBA, HIPAA, NYDFS Part 500, as applicable)
• Review and negotiate vendor/third-party security terms, cyber insurance policies, and incident response plans
• Partner with IT/Security teams on risk assessments, tabletop exercises, and security program development

Basic Knowledge And Qualifications

• 6 years of relevant experience in corporate compliance, data privacy, and/or cybersecurity
• Prior experience building or scaling a compliance program
• Ability to translate complex legal requirements into practical business guidance
• CIPP/US, or CIPM certification or ability to become certified in one (1) year
• Bachelor's degree required, Masters or Juris Doctor degree preferred
• Highly collaborative instincts with the ability to manage cross-functional projects