Senior Director, Global Privacy & Data Protection
for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must not repeat job title. No Job ID etc. Remove boilerplate. We need to extract substantive info.
Let's parse posting.
First paragraph: "Are you ready to embark on a career that truly affects people around the world? Trulioo invites you to be a catalyst for change in the dynamic realm of digital identity verification. As the global front-runner in our industry, we are redefining how businesses grow, innovate and comply online. Picture yourself at the forefront of innovation, contributing to our award-winning platform that enables organizations worldwide to quickly onboard customers, optimize costs and combat fraud. Fueled by Silicon Valley support, Trulioo stands as the trusted platform that can verify more than 5 billion people and 700 million business entities spanning 195 countries. But Trulioo is more than a tech company. We are a united force of dedicated experts committed to establishing trust online - and we’re proud to be recognized as a BC Top Employer for the second consecutive year, reflecting our commitment to an inclusive, collaborative, and people-first workplace. Headquartered in Vancouver and with strategic hubs in San Diego and Dublin, we foster a culture of collaboration and open communication. Our offices support a hybrid model and staff typically work three days per week at a hub location. Join us where excitement meets innovation and contribute to a world where trust and technology unite."
That's about the company, could be "About the role"? Actually "About the role" heading is for description of role. But we have a "Position Summary" later. The initial paragraph is more about company overview. Could be placed under "About the role"? The instruction: use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to include only sections with real content.
We have "What We Offer" which includes Benefits, Flexible Hybrid Working Environment, Wellness, Employee Resource Groups. That's benefits info. So we can put Benefits section.
We have "Position Summary" which is about the role. That could be "About the role". It includes description of Senior Director, Global Privacy & Data Protection role. So we can put that under About the role.
We have "What You’ll Be Doing" which is responsibilities. So Responsibilities section.
We have "What You’ll Bring" which is requirements/qualifications. Could split into Requirements and Qualifications? The instruction says we can have both but we should prefer few substantive sections over many thin ones. We could combine Requirements and Qualifications into one section maybe "Requirements". But we have headings list includes both; we can choose to include only those with content. Could put Requirements (or Qualifications) with the list. Since they ask for both headings as examples, but we can decide to include only one if content fits. However we have both "What You’ll Bring" (requirements) and "Nice To Have" (preferred qualifications). Could treat "What You’ll Bring" as Requirements, and "Nice To Have" as Qualifications or Skills. But we also have Skills heading. Could put skills under Skills. However the Nice To Have includes experience in certain domains, certifications, etc. That could be Skills.
We also have Pay and Schedule: not mentioned explicitly except hybrid model and staff typically work three days per week at a hub location. That's schedule info: hybrid model, three days per week at hub location. So we can include Schedule section with that detail. Pay: not mentioned (no salary). So we should not include Pay section because no specific content.
Benefits: we have details: comprehensive benefits package: health, dental, vision, retirement plans with company match, paid time off, parental leave, annual education & training stipend ($1,000 local currency). Also flexible hybrid working environment, weekly lunches, coffee, social events, parent rooms, on-site gyms, lounges, workstations. Wellness: workshops, Headspace subscription. Employee Resource Groups. So we can put Benefits section with that.
We also have "Interview Process" and "Thriving at Trulioo" etc. Those are boilerplate? The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. Interview Process might be considered application instructions? It's part of the process but maybe we should keep? The instruction says remove application instructions. Interview Process is basically steps of interview; could be considered application instructions. Safer to remove. Also "Thriving at Trulioo" is promotional; maybe keep? It's somewhat fluff but could be considered part of About the role? Might be considered boilerplate. Safer to omit.
Also "Privacy Notice" at end is legal boilerplate; remove.
Thus sections: About the role (Position Summary), Responsibilities (What You’ll Be Doing), Requirements (What You’ll Bring), Skills (Nice To Have), Benefits (What We Offer), Schedule (hybrid model, three days per week). Possibly also include "Qualifications" but we can merge.
We need to output only HTML fragment, no /. Use for each section heading. Use - for any list of duties/requirements/benefits. Use
for prose.
We must preserve ALL substantive information; do not invent or summarize away detail. So we need to keep details exactly as given, but we can format into lists.
Let's extract each section content.
About the role (Position Summary):
"Trulioo is seeking a commercially minded and execution-oriented Senior Director, Global Privacy & Data Protection to lead our global privacy strategy, data protection program, and designated Data Protection Officer. Reporting to the Chief Risk and Strategy Officer, this role will actively lead how privacy, data protection, AI governance, and responsible data use are embedded across Trulioo’s products, operations, commercial motions, and governed by leading practices. This is a senior leadership role for a privacy executive who can operate in scaling, agile environments and partnering with Product, Engineering, Legal, Security, Enterprise Risk, Sales, Marketing, and Customer Success. The ideal candidate brings extensive expertise in GDPR, U.S. state privacy laws, and Canadian privacy laws, with experience in emerging areas including, but not limited to, biometrics, AI, age verification, data retention, data classification, and emerging identity technologies. This role is expected to leverage AI and emerging technologies to improve productivity, enhance decision-making, and continuously optimize how work is performed. This will be a full-time, permanent position working on a hybrid model from one of our North American offices or fully remote."
We need to keep all that. Could break into paragraphs.
Responsibilities (What You’ll Be Doing):
List bullet points:
- Global Privacy Strategy & DPO
- Build and lead Trulioo’s global privacy and data protection strategy across priority markets, products, customers, and operating environments.
- Serve as Trulioo’s designated Data Protection Officer for Europe, providing independent, credible, and commercially practical advice on GDPR and related obligations.
- Advise executive leadership, as needed, on privacy risk, regulatory change, customer expectations, and strategic trade-offs tied to product innovation and market expansion.
- Represent Trulioo in privacy-related engagements with regulators, enterprise customers, industry groups, and other external stakeholders.
- Act as a strategic advisor on privacy and data protection implications as Trulioo expands into new operating regions, verticals, and expands the product catalog.
- Monitor global privacy developments and translate implications into practical guidance for products, operations, market expansion, and customer commitments.
- Privacy Program Operations & Governance
- Mature Trulioo’s privacy program, including PIAs, DPIAs, records of processing, data subject rights, vendor privacy reviews, and cross-border transfer mechanisms.
- Integrate privacy by design into product development, commercial contracting, customer onboarding, third-party management, enterprise risk management, and agile operating rhythms.
- Own and evolve key privacy and data governance policies, including data retention, data classification, information classification and protection, data handling, and responsible data use.
- Lead privacy incident readiness and response, including investigation support, breach assessment, regulatory notification analysis, remediation, and post-incident improvement.
- Develop practical reporting, metrics, and executive-level insights that create visibility into privacy risks, regulatory readiness, and program maturity.
- Commercial Enablement, Product, & Engineering Advisor
- Partner with Product and Engineering to embed privacy by design into agile product development, architecture decisions, data flows, and release processes.
- Provide guidance on privacy risks tied to identity verification, fraud prevention, biometrics, document verification, data enrichment, AI, machine learning, and emerging identity technologies.
- Serve as a senior privacy advisor to Sales, Customer Success, Marketing, Solutions, and Legal in support of enterprise due diligence, RFPs, audits, and strategic customer engagements.
- Help shape responsible AI governance, including privacy impact analysis, consumer data use, automated processing, transparency, and controls for responsible product deployment.
- Lead or support negotiation of DPAs, SCCs, data transfer terms, privacy schedules, customer commitments, vendor terms, and partner arrangements.
- Support commercialization by validating privacy positioning, customer-facing claims, contractual commitments, and market- specific privacy requirements.
- Build privacy thought leadership that strengthens Trulioo’s credibility with customers, regulators, partners, and industry stakeholders.
- Team Leadership & Cross-Functional Influence
- Lead, coach, and develop a high-performing privacy team with strong judgment, business orientation, and operational discipline.
- Create clear decision-making frameworks that allow teams to move quickly while managing privacy and data protection risk effectively.
- Foster a culture of responsible innovation, practical risk management, and accountable data use across the organization.
We need to keep all details; we can keep as bullet points under subheadings? But we only allowed
for section headings, not subheadings. Could still use
for prose and
- for lists. We could treat each bullet as
- . The subheadings like "Global Privacy Strategy & DPO" could be bolded within
or we could keep as
- with leading text. Probably easiest: make a single
with each bullet as - containing the sentence(s). Keep the subheading as part of the
- text.
Similarly for Requirements (What You’ll Bring):
List:
- 15+ years of experience in privacy, data protection, technology law, regulatory advisory, or related legal and risk leadership roles, including significant in-house experience.
- Extensive expertise in GDPR, European data protection expectations, U.S. state privacy laws, and Canadian privacy laws.
- Demonstrated ability to serve as a senior privacy leader or Data Protection Officer in a complex, global technology environment.
- Experience advising Product, Engineering, Security, Legal, and go-to-market teams on privacy by design, data protection risk, product launches, and customer-facing commitments.
- Practical experience with PIAs, DPIAs, data mapping, transfer mechanisms, DPAs, SCCs, vendor risk, data subject rights, retention, and privacy incident response.
- Strong understanding of privacy issues tied to emerging identity technology and use cases including biometrics, identity, AI, behavior analysis, automated processing, fraud prevention, and device intelligence.
- Track record building or maturing privacy program operations in agile, high-growth, regulated, or enterprise SaaS environments.
- Executive presence, sound judgment, and the ability to translate regulatory complexity into clear business decisions.
- Strong people leadership skills, with the ability to build capability, set direction, and raise the operating maturity of a privacy function.
- Law degree or equivalent legal/privacy qualification; membership in good standing with a relevant law society or bar is strongly preferred.
We can keep as
- .
Skills (Nice To Have):
List:
- Experience in RegTech, FinTech, identity verification, fraud prevention, payments, financial services, or enterprise SaaS.
- Working knowledge of privacy
for each section heading. Use - for any list of duties/requirements/benefits. Use
for prose.
We must preserve ALL substantive information; do not invent or summarize away detail. So we need to keep details exactly as given, but we can format into lists.
Let's extract each section content.
About the role (Position Summary):
"Trulioo is seeking a commercially minded and execution-oriented Senior Director, Global Privacy & Data Protection to lead our global privacy strategy, data protection program, and designated Data Protection Officer. Reporting to the Chief Risk and Strategy Officer, this role will actively lead how privacy, data protection, AI governance, and responsible data use are embedded across Trulioo’s products, operations, commercial motions, and governed by leading practices. This is a senior leadership role for a privacy executive who can operate in scaling, agile environments and partnering with Product, Engineering, Legal, Security, Enterprise Risk, Sales, Marketing, and Customer Success. The ideal candidate brings extensive expertise in GDPR, U.S. state privacy laws, and Canadian privacy laws, with experience in emerging areas including, but not limited to, biometrics, AI, age verification, data retention, data classification, and emerging identity technologies. This role is expected to leverage AI and emerging technologies to improve productivity, enhance decision-making, and continuously optimize how work is performed. This will be a full-time, permanent position working on a hybrid model from one of our North American offices or fully remote."
We need to keep all that. Could break into paragraphs.
Responsibilities (What You’ll Be Doing):
List bullet points:
- Global Privacy Strategy & DPO
- Build and lead Trulioo’s global privacy and data protection strategy across priority markets, products, customers, and operating environments.
- Serve as Trulioo’s designated Data Protection Officer for Europe, providing independent, credible, and commercially practical advice on GDPR and related obligations.
- Advise executive leadership, as needed, on privacy risk, regulatory change, customer expectations, and strategic trade-offs tied to product innovation and market expansion.
- Represent Trulioo in privacy-related engagements with regulators, enterprise customers, industry groups, and other external stakeholders.
- Act as a strategic advisor on privacy and data protection implications as Trulioo expands into new operating regions, verticals, and expands the product catalog.
- Monitor global privacy developments and translate implications into practical guidance for products, operations, market expansion, and customer commitments.
- Privacy Program Operations & Governance
- Mature Trulioo’s privacy program, including PIAs, DPIAs, records of processing, data subject rights, vendor privacy reviews, and cross-border transfer mechanisms.
- Integrate privacy by design into product development, commercial contracting, customer onboarding, third-party management, enterprise risk management, and agile operating rhythms.
- Own and evolve key privacy and data governance policies, including data retention, data classification, information classification and protection, data handling, and responsible data use.
- Lead privacy incident readiness and response, including investigation support, breach assessment, regulatory notification analysis, remediation, and post-incident improvement.
- Develop practical reporting, metrics, and executive-level insights that create visibility into privacy risks, regulatory readiness, and program maturity.
- Commercial Enablement, Product, & Engineering Advisor
- Partner with Product and Engineering to embed privacy by design into agile product development, architecture decisions, data flows, and release processes.
- Provide guidance on privacy risks tied to identity verification, fraud prevention, biometrics, document verification, data enrichment, AI, machine learning, and emerging identity technologies.
- Serve as a senior privacy advisor to Sales, Customer Success, Marketing, Solutions, and Legal in support of enterprise due diligence, RFPs, audits, and strategic customer engagements.
- Help shape responsible AI governance, including privacy impact analysis, consumer data use, automated processing, transparency, and controls for responsible product deployment.
- Lead or support negotiation of DPAs, SCCs, data transfer terms, privacy schedules, customer commitments, vendor terms, and partner arrangements.
- Support commercialization by validating privacy positioning, customer-facing claims, contractual commitments, and market- specific privacy requirements.
- Build privacy thought leadership that strengthens Trulioo’s credibility with customers, regulators, partners, and industry stakeholders.
- Team Leadership & Cross-Functional Influence
- Lead, coach, and develop a high-performing privacy team with strong judgment, business orientation, and operational discipline.
- Create clear decision-making frameworks that allow teams to move quickly while managing privacy and data protection risk effectively.
- Foster a culture of responsible innovation, practical risk management, and accountable data use across the organization.
We need to keep all details; we can keep as bullet points under subheadings? But we only allowed
for section headings, not subheadings. Could still use
for prose and
- for lists. We could treat each bullet as
- . The subheadings like "Global Privacy Strategy & DPO" could be bolded within
or we could keep as
- with leading text. Probably easiest: make a single
with each bullet as - containing the sentence(s). Keep the subheading as part of the
- text.
Similarly for Requirements (What You’ll Bring):
List:
- 15+ years of experience in privacy, data protection, technology law, regulatory advisory, or related legal and risk leadership roles, including significant in-house experience.
- Extensive expertise in GDPR, European data protection expectations, U.S. state privacy laws, and Canadian privacy laws.
- Demonstrated ability to serve as a senior privacy leader or Data Protection Officer in a complex, global technology environment.
- Experience advising Product, Engineering, Security, Legal, and go-to-market teams on privacy by design, data protection risk, product launches, and customer-facing commitments.
- Practical experience with PIAs, DPIAs, data mapping, transfer mechanisms, DPAs, SCCs, vendor risk, data subject rights, retention, and privacy incident response.
- Strong understanding of privacy issues tied to emerging identity technology and use cases including biometrics, identity, AI, behavior analysis, automated processing, fraud prevention, and device intelligence.
- Track record building or maturing privacy program operations in agile, high-growth, regulated, or enterprise SaaS environments.
- Executive presence, sound judgment, and the ability to translate regulatory complexity into clear business decisions.
- Strong people leadership skills, with the ability to build capability, set direction, and raise the operating maturity of a privacy function.
- Law degree or equivalent legal/privacy qualification; membership in good standing with a relevant law society or bar is strongly preferred.
We can keep as
- .
Skills (Nice To Have):
List:
- Experience in RegTech, FinTech, identity verification, fraud prevention, payments, financial services, or enterprise SaaS.
- Working knowledge of privacy
for prose. We must preserve ALL substantive information; do not invent or summarize away detail. So we need to keep details exactly as given, but we can format into lists. Let's extract each section content. About the role (Position Summary): "Trulioo is seeking a commercially minded and execution-oriented Senior Director, Global Privacy & Data Protection to lead our global privacy strategy, data protection program, and designated Data Protection Officer. Reporting to the Chief Risk and Strategy Officer, this role will actively lead how privacy, data protection, AI governance, and responsible data use are embedded across Trulioo’s products, operations, commercial motions, and governed by leading practices. This is a senior leadership role for a privacy executive who can operate in scaling, agile environments and partnering with Product, Engineering, Legal, Security, Enterprise Risk, Sales, Marketing, and Customer Success. The ideal candidate brings extensive expertise in GDPR, U.S. state privacy laws, and Canadian privacy laws, with experience in emerging areas including, but not limited to, biometrics, AI, age verification, data retention, data classification, and emerging identity technologies. This role is expected to leverage AI and emerging technologies to improve productivity, enhance decision-making, and continuously optimize how work is performed. This will be a full-time, permanent position working on a hybrid model from one of our North American offices or fully remote." We need to keep all that. Could break into paragraphs. Responsibilities (What You’ll Be Doing): List bullet points: - Global Privacy Strategy & DPO - Build and lead Trulioo’s global privacy and data protection strategy across priority markets, products, customers, and operating environments. - Serve as Trulioo’s designated Data Protection Officer for Europe, providing independent, credible, and commercially practical advice on GDPR and related obligations. - Advise executive leadership, as needed, on privacy risk, regulatory change, customer expectations, and strategic trade-offs tied to product innovation and market expansion. - Represent Trulioo in privacy-related engagements with regulators, enterprise customers, industry groups, and other external stakeholders. - Act as a strategic advisor on privacy and data protection implications as Trulioo expands into new operating regions, verticals, and expands the product catalog. - Monitor global privacy developments and translate implications into practical guidance for products, operations, market expansion, and customer commitments. - Privacy Program Operations & Governance - Mature Trulioo’s privacy program, including PIAs, DPIAs, records of processing, data subject rights, vendor privacy reviews, and cross-border transfer mechanisms. - Integrate privacy by design into product development, commercial contracting, customer onboarding, third-party management, enterprise risk management, and agile operating rhythms. - Own and evolve key privacy and data governance policies, including data retention, data classification, information classification and protection, data handling, and responsible data use. - Lead privacy incident readiness and response, including investigation support, breach assessment, regulatory notification analysis, remediation, and post-incident improvement. - Develop practical reporting, metrics, and executive-level insights that create visibility into privacy risks, regulatory readiness, and program maturity. - Commercial Enablement, Product, & Engineering Advisor - Partner with Product and Engineering to embed privacy by design into agile product development, architecture decisions, data flows, and release processes. - Provide guidance on privacy risks tied to identity verification, fraud prevention, biometrics, document verification, data enrichment, AI, machine learning, and emerging identity technologies. - Serve as a senior privacy advisor to Sales, Customer Success, Marketing, Solutions, and Legal in support of enterprise due diligence, RFPs, audits, and strategic customer engagements. - Help shape responsible AI governance, including privacy impact analysis, consumer data use, automated processing, transparency, and controls for responsible product deployment. - Lead or support negotiation of DPAs, SCCs, data transfer terms, privacy schedules, customer commitments, vendor terms, and partner arrangements. - Support commercialization by validating privacy positioning, customer-facing claims, contractual commitments, and market- specific privacy requirements. - Build privacy thought leadership that strengthens Trulioo’s credibility with customers, regulators, partners, and industry stakeholders. - Team Leadership & Cross-Functional Influence - Lead, coach, and develop a high-performing privacy team with strong judgment, business orientation, and operational discipline. - Create clear decision-making frameworks that allow teams to move quickly while managing privacy and data protection risk effectively. - Foster a culture of responsible innovation, practical risk management, and accountable data use across the organization. We need to keep all details; we can keep as bullet points under subheadings? But we only allowed
for section headings, not subheadings. Could still use
for prose and
- for lists. We could treat each bullet as
- . The subheadings like "Global Privacy Strategy & DPO" could be bolded within
or we could keep as
- with leading text. Probably easiest: make a single
- with each bullet as
- containing the sentence(s). Keep the subheading as part of the
- text.
Similarly for Requirements (What You’ll Bring):
List:
- 15+ years of experience in privacy, data protection, technology law, regulatory advisory, or related legal and risk leadership roles, including significant in-house experience.
- Extensive expertise in GDPR, European data protection expectations, U.S. state privacy laws, and Canadian privacy laws.
- Demonstrated ability to serve as a senior privacy leader or Data Protection Officer in a complex, global technology environment.
- Experience advising Product, Engineering, Security, Legal, and go-to-market teams on privacy by design, data protection risk, product launches, and customer-facing commitments.
- Practical experience with PIAs, DPIAs, data mapping, transfer mechanisms, DPAs, SCCs, vendor risk, data subject rights, retention, and privacy incident response.
- Strong understanding of privacy issues tied to emerging identity technology and use cases including biometrics, identity, AI, behavior analysis, automated processing, fraud prevention, and device intelligence.
- Track record building or maturing privacy program operations in agile, high-growth, regulated, or enterprise SaaS environments.
- Executive presence, sound judgment, and the ability to translate regulatory complexity into clear business decisions.
- Strong people leadership skills, with the ability to build capability, set direction, and raise the operating maturity of a privacy function.
- Law degree or equivalent legal/privacy qualification; membership in good standing with a relevant law society or bar is strongly preferred.
We can keep as
- . Skills (Nice To Have): List: - Experience in RegTech, FinTech, identity verification, fraud prevention, payments, financial services, or enterprise SaaS. - Working knowledge of privacy