Director, Global Data Privacy, Security & AI

Lime; London; Remote; GBP 80,000 - 120,000; Full time

Job summary

A leading shared electric vehicle company is seeking a UK-based Director of Data Privacy, Security & AI. The role involves leading global data privacy efforts, ensuring compliance with international laws, and promoting a culture of security. Candidates should have extensive experience in data privacy, strong legal qualifications, and a collaborative approach, thriving in a high-velocity environment.

Qualifications

• Extensive experience in data privacy and security.
• Deep familiarity with GDPR, CCPA, and cybersecurity frameworks.
• Strong communication skills and ability to work in a high-velocity environment.

Responsibilities

• Develop and implement global data privacy programs.
• Lead the review and negotiation of Data Processing Agreements and legal partnerships.
• Coordinate response to any data privacy or security incidents.

Skills

Data Privacy

Cybersecurity

AI Governance

Legal Compliance

Collaboration

Education

Legal qualifications to serve as in-house data privacy counsel

Job description

This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.

Lime is the world's largest shared electric vehicle company. We're on a mission to build a future where transportation is shared, affordable and carbon-free. Our electric bikes and scooters have powered 700+ million rides in 250+ cities on 5 continents, replacing an estimated 150+ million car trips. Named a Time 100 Most Influential Company and Fast Company Brand That Matters, Lime continues to set the pace for shared micromobility globally.

Lime is seeking a UK-based Director of Data Privacy, Security & AI to lead our global efforts in these critical and evolving data domains. In this extremely cross-functional role, you will be responsible for developing and implementing a comprehensive strategy that not only ensures our compliance with international data privacy laws and regulations but also fosters a culture of trust and security with our riders, regulators and the rest of the world. You will be responsible for everything from managing Lime's DSAR responses to revising DPAs to conducting DPIAs. You will also play a pivotal role in shaping our approach to data governance, cybersecurity, and the ethical use of artificial intelligence in our operations.

Reporting to the VP, Head of Risk & Compliance, the right person for this role is someone who is as comfortable defining global strategy on emerging AI initiatives as you are rolling up your sleeves to get the job done. You're someone who thrives in a high-velocity, high autonomy environment, and is looking forward to a role where there's never a dull moment.

What You'll Do:

• Data Privacy & Operations: Design, implement, maintain, and continuously scale a pragmatic, business-oriented global data privacy program to ensure compliance with a multitude of worldwide regulations across our operations in ~30 countries.
• Commercial & Legal Partnership: Take the lead in reviewing, drafting, and negotiating Data Processing Agreements (DPAs) and other privacy and security-related contractual clauses with our partners, vendors, and corporate customers.
• Incident Response: Coordinate the Legal & Compliance response to any data privacy or security incidents (including investigation, remediation, and communication).
• AI Governance: Maintain line of sight on rapidly emerging AI laws and regulations to ensure ethical and responsible development and deployment of AI and machine learning models at Lime for ensuring fairness, transparency, and accountability.
• Privacy by Design: Partner closely with our Engineering, Product, and Operations teams to integrate privacy-by-design and security-by-design principles into the entire product development lifecycle.

About You

• The legal qualifications necessary to serve as an in-house data privacy counsel.
• Extensive experience working at the intersection of data privacy, security and governance (ideally with significant time spent as the only "privacy person").
• Demonstrated ability to build compliant privacy programs in a risk-based way.
• An understanding that in-house advice has to be sensible, defensible and actionable.
• An unusually high tolerance for ambiguity, flexibility and the ability to thrive in a high velocity environment while working remotely with minimal oversight or supervision
• A remarkably strong ability to work collaboratively with legal colleagues and business, security, and engineering partners to ensure that our business practices adhere to privacy laws and regulations globally.
• Deep familiarity with global data protection laws (GDPR, CCPA, etc.), cybersecurity frameworks (NIST, ISO 27001, etc.), and the evolving landscape of AI governance.
• Strong communication skills (we love undercover privacy nerds who don't sound like one outside of privacy conferences like IAPP's Global Summit).
• Enjoyment of puns about being along for the ride at a micromobility company.
• Residence in the EMEA region, with a strong preference for UK-based residency.

Preferred Experience

• Experience in the mobility, transportation, or IoT industries.
• Professional certifications such as CIPP/E, AIGP, etc.
• Have done something interesting with AI.
• Fluency in multiple languages.

#LI-REMOTE

#LI-TG1

If you want to make an impact, Lime is the place for you. Not sure if you meet all the qualifications? If this role excites you we encourage you to apply. Explore all opportunities on our career page.

Lime is an Equal Opportunity Employer, but that's just the start. We believe different perspectives help us grow and achieve more. That's why we're dedicated to hiring and developing the most talented and globally diverse team - which includes individuals with different backgrounds, abilities, identities and experiences.Applicants who require a reasonable accommodation for any part of the application or hiring process can email [e-mail] for assistance.

Use of artificial intelligence or an LLM such as ChatGPT during the interview process will be grounds for rejection of your application.