Lead SSL Data Privacy Counsel

Didi; Ciudad de México; Presencial; MXN 1,473,000 - 1,843,000; Jornada completa

Descripción de la vacante

A leading mobility technology platform is seeking a Lead SSL Data Privacy Counsel in Mexico to spearhead privacy compliance efforts across Spanish-speaking Latin America. This position will involve developing policies, advising on business initiatives, and ensuring adherence to data protection laws. The ideal candidate will have 5–8 years of privacy law experience, a law degree, and fluency in Spanish and English.

Formación

• 5–8 years of experience in privacy and data protection matters.
• Fluency in English and Spanish (written and spoken).
• Experience in a technology, mobility, or fintech environment.

Responsabilidades

• Design and execute privacy compliance strategy across SSL markets.
• Develop internal policies and governance mechanisms.
• Advise on new business initiatives ensuring privacy-by-design.

Conocimientos

Privacy law expertise

Communication skills

Project management

Stakeholder management

Educación

Law degree

Descripción del empleo

Lead SSL Data Privacy Counsel

DiDi Global Inc. is the world’s leading mobility technology platform. It offers a wide range of app-based services across markets including Asia-Pacific, Latin America and Africa, including ride hailing, taxi hailing, chauffeur, hitch and other forms of shared mobility as well as auto solutions, food delivery, intra-city freight, and financial services.

DiDi provides car owners, drivers, and delivery partners with flexible work and income opportunities. It is committed to collaborating with policymakers, the taxi industry, the automobile industry and the communities to solve the world’s transportation, environmental and employment challenges through the use of AI technology and localized smart transportation innovations. DiDi strives to create better life experiences and greater social value, by building a safe, inclusive and sustainable transportation and local services ecosystem for cities of the future.

Team Overview

At DiDi, data privacy is a core pillar of user trust and regulatory compliance. Our Legal team is seeking a highly motivated Lead SSL Data Privacy Counsel to help strengthen and scale our privacy program across Spanish-Speaking Latin America (SSL), with a primary focus on Mexico. This role is critical to maintaining our privacy compliance framework and supporting the consistent application of global privacy standards across business lines, including Mobility, Food Delivery, and Financial Services.

You will work closely with Legal, InfoSec, and cross-functional teams to proactively identify privacy risks, ensure compliance with applicable laws, and enable innovation through privacy-by-design strategies. This position offers a unique opportunity to shape the future of our privacy governance in the region and to serve as a trusted advisor to both legal peers and business stakeholders.

Role Responsibilities

• Coordinating the design and execution of our privacy compliance strategy across SSL markets, ensuring alignment with global policies and local regulatory requirements.
• Supporting the development of internal policies, SOPs, and governance mechanisms, including Data Subject Requests (DSRs), records of processing activities, and privacy impact assessments.
• Advising on new features, business initiatives, or data uses, ensuring privacy-by-design principles are embedded from the start.
• Drafting and maintaining external-facing documents, such as privacy notices, in compliance with applicable data protection laws.
• Reviewing and negotiating privacy-related contractual terms, including DPAs and data sharing agreements.
• Monitoring regulatory trends, providing risk-based recommendations, and leading engagement with authorities in response to inquiries, audits, or enforcement actions.
• Collaborating with Information Security Department to manage data incidents and to implement organizational and technical safeguards.
• Promoting a strong culture of privacy through training programs, awareness campaigns, and continuous stakeholder engagement.
• Supporting regulatory due diligence processes and helping business lines understand and comply with ridesharing, delivery, and fintech data obligations.

Role Qualifications

• A law degree and strong expertise in privacy and data protection law (e.g., Mexico’s Federal Law on the Protection of Personal Data, GDPR, etc.).
• 5–8 years of experience advising on privacy and data protection matters in a law firm or in-house legal department, ideally within a technology, mobility, or fintech environment.
• Demonstrated ability to translate legal requirements into scalable operational processes and to assess privacy risks in emerging technologies (AI, analytics, etc.).
• Experience working in cross-functional and cross-border teams, with excellent communication and stakeholder management skills.
• A pragmatic, business-oriented approach and a reputation for responsiveness, collaboration, and ethical integrity.
• Strong organizational and project management skills, including the ability to drive initiatives independently while aligning with global teams.
• Fluency in English and Spanish (written and spoken) is required.

EEO Statement

We are committed to building inclusive and diverse teams.

At DiDi, we believe that our differences are our biggest source of strength. That‘s why we are committed to promoting equal opportunities to all candidates and employees as an Equal Opportunity Employer.

Employment and advancement decisions at DiDi are always made based on the needs of the position and the qualifications of the candidate. We do not discriminate against any employee or applicant based on their gender, age, sexual orientation, nationality, marital status, pregnancy/maternity, disability, race, religion and beliefs, or any other status protected by applicable laws wherever we operate.

We are committed to building inclusive and diverse teams, and a workplace that is free from discrimination and harassment, because that’s how we create better products and services, make better decisions and better serve the communities we’re a part of.