Thinking of applying? Check your CV against this job first.
See your match score, your strongest skills for this role, and what's missing — before you spend time on an application.
Your real match score
Free CareerPilot account · Takes about 2 minutes
The Data Privacy Manager (“Privacy Manager”) is responsible for managing,
co-ordinating and generally implementing KLDiscovery’s data protection strategy
and ensuring compliance with applicable data protection laws, including the
General Data Protection Regulation (“GDPR”), the UK Data Protection Act 2018 and
US State privacy laws including the California Consumer Privacy Act (“CCPA”) and
Health Insurance Portability and Accountability Act (“HIPAA”). The Privacy
Manager will act as the internal lead for KLDiscovery on data privacy queries,
serves as the primary point of contact for data subjects and regulatory
authorities, provides expert advice on data protection matters, undertakes
implementation of data privacy initiatives, ensures compliance with KLDiscovery
policies and supports KLDiscovery in managing risks associated with the
processing of personal data for clients and employees.
Key Responsibilities
Compliance Monitoring and Advisory
• Monitor compliance against global data protection laws and internal policies,
procedures, and controls, both for clients and employees.
• Advise KLDiscovery and its employees on data protection obligations and best
practices.
• Monitor emerging trends, legislative changes, and guidance relating to data
privacy, particularly involving use of artificial-intelligence.
Risk and Assessment
• Conduct regular audits, risk assessments, and reviews of data processing
activities including vendor due diligence as it relates Data Privacy
Assessments.
• Co-ordinate and manage Data Protection Impact Assessments (“DPIAs”), Transfer
Impact Assessments (“TIAs”), Legitimate Interest Assessments (‘’LIAs’’) and
advise on mitigating risks for both product and internal initiatives.
• Maintain KLDiscovery’s compliance with cross‑border data transfer
requirements, including the Data Privacy Framework (“DPF”), Schrems II
obligations, and any successor or equivalent transfer mechanisms.
Records and Documentation
• Own and maintain the Records of Processing Activities (“ROPA”) as required by
law on a per country basis, covering all business units.
• Develop and maintain data protection policies, privacy notices, and
supporting documentation.
• Assist in development of contractual frameworks for clients and providing
advice on best practices.
Data Subject and Regulatory Liaison
• Serve as the primary contact for data subjects regarding data protection
queries, complaints, and requests, including Subject Access Requests
(“SARs”), with responses managed within applicable statutory timeframes and
data deletion.
• Act as the primary liaison with supervisory authorities and facilitate
communication in the event of a data breach or investigation.
• Support the cybersecurity incident response process by providing expert
guidance on breach classification, notification obligations, and regulatory
reporting requirements across applicable jurisdictions including GDPR, HIPAA,
DORA, NIS2, and US state laws.
Governance, Training and Awareness
• Deliver KLDiscovery’s data protection training and awareness programme.
• Monitoring changes in privacy laws and advising the organization accordingly.
• Client and commercial support answering data privacy questions from clients
as part of client RFPs and due diligence process and questionnaires.
• Support KLD's AI governance framework and EU AI Act compliance readiness,
including reviewing AI-driven data processing activities for privacy risk and
control adequacy.
Qualifications and Experience
• Minimum of 5 years’ experience in a dedicated privacy role, such as a privacy
manager or equivalent, in an international business, preferably SaaS.
• A degree in law, information security, IT, compliance, or a related field.
• Professional certification in data protection or privacy (e.g., CIPP/E, CIPM,
GDPR Practitioner).
• Expert knowledge of GDPR, UK Data Protection Act 2018, US State privacy laws
as well as HIPAA and other relevant legislation. An AI Act or AI governance
certification (e.g., AIGP) is an advantage. Experience with ITAR is a plus.
• Experience conducting security and privacy audits, risk assessments, records
of processing activities, DPIAs and managing data protection projects.
• Ability to translate privacy requirements into practical operational guidance
for product and internal teams.
• Excellent communication, analytical, and problem-solving skills.
• Ability to manage sensitive information with discretion and integrity.
Personal Attributes
• Meticulous attention to detail.
• Proactive and adaptable approach to work.
• Ability to work independently and collaboratively.
• Strong ethical standards and commitment to safeguarding privacy.
• Confidence to challenge practices and promote compliance across the
organisation.
Reporting Line
The Privacy Manager reports directly to the General Counsel and works closely
with IT, Cybersecurity, Legal, Marketing, Product and People & Culture Teams and
has access to the highest levels of decision-making within the organisation.
Location and Working Hours
This position is remote.
Remuneration
Competitive salary commensurate with experience, plus benefits package.
Our Mission & Values
Our Mission: We bring clarity, trust, and meaning to data for clients navigating
legal matters worldwide.
These four values guide how we operate, make decisions, and work together every
day.
• Client is Always in the Room
• We operate and make decisions as if the client
is in the room. We anticipate their needs, consider their perspective, and
prioritize their best interests.
• Own the Outcome
• We bring an unwavering bias for action, act with urgency,
and hold ourselves accountable to our clients, and each other.
• Better Every Day
• We improve our tomorrow by always striving to be better
than today. We embrace curiosity, question assumptions, and raise the bar
constantly.
• Deliver Results Together
• We collaborate obsessively to achieve shared
success. We assume good intentions, debate ideas thoughtfully, treat each
other with respect, and fully commit once decisions are made.
KLDiscovery is an Equal Opportunity Employer. We do not discriminate on the
basis of race, color, creed, religion, national origin, ancestry, sex, gender
identity, gender expression, sexual orientation, marital or family status,
pregnancy, age, veteran status, disability, genetic information, or any other
characteristic protected by applicable law. This commitment applies to all
aspects of employment, including recruitment, hiring, compensation, promotion,
training, discipline, and termination. Employment decisions are based on
job-related qualifications, skills, and experience.
WHY YOU’LL LOVE WORKING FOR KLD
At KLD, our people are at the heart of everything we do. We believe that when
our employees feel supported, valued, and empowered, they can thrive both
personally and professionally. That’s why we’re committed to fostering a
collaborative, inclusive workplace where you can grow your career, make
meaningful contributions, and enjoy a healthy work-life balance.
Our competitive benefits and programs are designed to support your well-being
and success. Depending on your location, these may include comprehensive health
and wellness benefits, retirement and financial programs, paid time off and
leave options, employee assistance resources, and professional development
opportunities.
We also embrace flexibility, offering remote work opportunities for most
employees to support work-life balance while keeping our teams connected and
collaborative. Certain roles may require an office-based or hybrid schedule
based on business and operational needs.
Wherever you’re located, you’ll be part of a global team that values your
contributions, supports your growth, and celebrates your success.