Data Privacy and Protection Officer

About the position

Kaseya is seeking a Data Privacy and Protection Officer who is a highly process-driven and dynamic business leader. This role involves implementing and executing Kaseya’s comprehensive global privacy, data protection, and compliance program to comply with global data privacy regimes such as CCPA, GDPR, HIPAA, and others. The successful candidate will drive the privacy compliance strategy for the company, collaborating with legal colleagues and the security team to review incidents and improve processes. The Privacy Officer will also develop and enhance the organization’s privacy compliance efforts, oversee investigations, and ensure an exceptional customer experience across departments and stakeholders.

Responsibilities

• Serve as the primary point of contact for privacy and data protection as the Data Protection Officer.
• Draft, review, negotiate, and manage data privacy and protection terms for various transactional agreements.
• Respond in real-time to investigations, compliance, and disclosure during security incidents.
• Manage investigations alongside the security team during security incidents.
• Serve as the main point of contact for employees, regulators, and public authorities on data protection issues.
• Provide legal support for information security risk management team.
• Implement best practices for privacy policies and compliance processes.
• Develop and implement policies and procedures for privacy compliance processes.
• Implement appropriate data privacy compliance controls and tools.
• Work cross-functionally with various teams to ensure compliance with privacy requirements.
• Lead specific regulatory compliance projects/initiatives for privacy.
• Provide subject matter expertise and respond to Data Subject Requests.
• Lead the Data Privacy Impact Assessments (DPIA) process.
• Monitor risk across the business by analyzing personal data processing.
• Translate legal and compliance requirements into privacy program deliverables.
• Serve as a subject matter expert on global data privacy and protection legal questions.
• Develop and deliver privacy training to various business functions.

Requirements

• JD degree and licensed to practice law in Florida.
• 7+ years of relevant legal experience as a practicing attorney, including experience in-house.
• Counseling on global data privacy and protection laws (including CCPA, GDPR).
• IAPP CIPP/US, CIPP/E or CIPM certification.
• Strong background in U.S. and EU data privacy requirements.
• Experience working with software and technology companies.

Nice-to-haves

• In-depth knowledge of GDPR, state privacy laws, and other major global privacy legislative frameworks.
• Solid understanding of the interplay between privacy and technology issues.
• Proven track record of operational excellence in responding to security incidents.
• Ability to effectively convey complex privacy concepts to technical and non-technical audiences.