Data Privacy Manager

Data Privacy Manager

The Data Privacy Manager ("Privacy Manager") is responsible for managing, co-ordinating and generally implementing KLDiscovery's data protection strategy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation ("GDPR"), the UK Data Protection Act 2018 and US State privacy laws including the California Consumer Privacy Act ("CCPA") and Health Insurance Portability and Accountability Act ("HIPAA"). The Privacy Manager will act as the internal lead for KLDiscovery on data privacy queries, serves as the primary point of contact for data subjects and regulatory authorities, provides expert advice on data protection matters, undertakes implementation of data privacy initiatives, ensures compliance with KLDiscovery policies and supports KLDiscovery in managing risks associated with the processing of personal data for clients and employees.

Key Responsibilities

Compliance Monitoring and Advisory

• Monitor compliance against global data protection laws and internal policies, procedures, and controls, both for clients and employees.
• Advise KLDiscovery and its employees on data protection obligations and best practices.
• Monitor emerging trends, legislative changes, and guidance relating to data privacy, particularly involving use of artificial-intelligence.

Risk and Assessment

• Conduct regular audits, risk assessments, and reviews of data processing activities including vendor due diligence as it relates Data Privacy Assessments.
• Co-ordinate and manage Data Protection Impact Assessments ("DPIAs"), Transfer Impact Assessments ("TIAs"), Legitimate Interest Assessments (''LIAs'') and advise on mitigating risks for both product and internal initiatives.
• Maintain KLDiscovery's compliance with cross-border data transfer requirements, including the Data Privacy Framework ("DPF"), Schrems II obligations, and any successor or equivalent transfer mechanisms.

Records and Documentation

• Own and maintain the Records of Processing Activities ("ROPA") as required by law on a per country basis, covering all business units.
• Develop and maintain data protection policies, privacy notices, and supporting documentation.
• Assist in development of contractual frameworks for clients and providing advice on best practices.

Data Subject and Regulatory Liaison

• Serve as the primary contact for data subjects regarding data protection queries, complaints, and requests, including Subject Access Requests ("SARs"), with responses managed within applicable statutory timeframes and data deletion.
• Act as the primary liaison with supervisory authorities and facilitate communication in the event of a data breach or investigation.
• Support the cybersecurity incident response process by providing expert guidance on breach classification, notification obligations, and regulatory reporting requirements across applicable jurisdictions including GDPR, HIPAA, DORA, NIS2, and US state laws.

Governance, Training and Awareness

• Deliver KLDiscovery's data protection training and awareness programme.
• Monitoring changes in privacy laws and advising the organization accordingly.
• Client and commercial support answering data privacy questions from clients as part of client RFPs and due diligence process and questionnaires.
• Support KLD's AI governance framework and EU AI Act compliance readiness, including reviewing AI-driven data processing activities for privacy risk and control adequacy.

Qualifications and Experience

• Minimum of 5 years' experience in a dedicated privacy role, such as a privacy manager or equivalent, in an international business, preferably SaaS.
• A degree in law, information security, IT, compliance, or a related field.
• Professional certification in data protection or privacy (e.g., CIPP/E, CIPM, GDPR Practitioner).
• Expert knowledge of GDPR, UK Data Protection Act 2018, US State privacy laws as well as HIPAA and other relevant legislation. An AI Act or AI governance certification (e.g., AIGP) is an advantage. Experience with ITAR is a plus.
• Experience conducting security and privacy audits, risk assessments, records of processing activities, DPIAs and managing data protection projects.
• Ability to translate privacy requirements into practical operational guidance for product and internal teams.
• Excellent communication, analytical, and problem-solving skills.
• Ability to manage sensitive information with discretion and integrity.

Personal Attributes

• Meticulous attention to detail.
• Proactive and adaptable approach to work.
• Ability to work independently and collaboratively.
• Strong ethical standards and commitment to safeguarding privacy.
• Confidence to challenge practices and promote compliance across the organisation.

Reporting Line

The Privacy Manager reports directly to the General Counsel and works closely with IT, Cybersecurity, Legal, Marketing, Product and People & Culture Teams and has access to the highest levels of decision-making within the organisation.

Location and Working Hours

This position is remote.

Remuneration

Competitive salary commensurate with experience, plus benefits package.

Our Mission & Values

Our Mission: We bring clarity, trust, and meaning to data for clients navigating legal matters worldwide.

These four values guide how we operate, make decisions, and work together every day.

• Client is Always in the Room - We operate and make decisions as if the client is in the room. We anticipate their needs, consider their perspective, and prioritize their best interests.

• Own the Outcome - We bring an unwavering bias for action, act with urgency, and hold ourselves accountable to our clients, and each other.

• Better Every Day - We improve our tomorrow by always striving to be better than today. We embrace curiosity, question assumptions, and raise the bar constantly.

• Deliver Results Together - We collaborate obsessively to achieve shared success. We assume good intentions, debate ideas thoughtfully, treat each other with respect, and fully commit once decisions are made.

KLDiscovery is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, creed, religion, national origin, ancestry, sex, gender identity, gender expression, sexual orientation, marital or family status, pregnancy, age, veteran status, disability, genetic information, or any other characteristic protected by applicable law. This commitment applies to all aspects of employment, including recruitment, hiring, compensation, promotion, training, discipline, and termination. Employment decisions are based on job-related qualifications, skills, and experience.

WHY YOU'LL LOVE WORKING FOR KLD

At KLD, our people are at the heart of everything we do. We believe that when our employees feel supported, valued, and empowered, they can thrive both personally and professionally. That's why we're committed to fostering a collaborative, inclusive workplace where you can grow your career, make meaningful contributions, and enjoy a healthy work-life balance.

Our competitive benefits and programs are designed to support your well-being and success. Depending on your location, these may include comprehensive health and wellness benefits, retirement and financial programs, paid time off and leave options, employee assistance resources, and professional development opportunities.

We also embrace flexibility, offering remote work opportunities for most employees to support work-life balance while keeping our teams connected and collaborative. Certain roles may require an office-based or hybrid schedule based on business and operational needs.

Wherever you're located, you'll be part of a global team that values your contributions, supports your growth, and celebrates your success.