Privacy Assurance & Compliance Specialist

OpenKrill; United States; Vor Ort; USD 90.000 - 150.000; Vollzeit

Benefits dieser Stelle

Competitive salary

Bonus opportunities

Flexible work schedules

Health benefits

Zusammenfassung

Everway is seeking a Privacy Assurance & Compliance Specialist to support the global privacy programme and act alongside the Director of Compliance as DPO. You will embed privacy into products and processes, leading DPIAs, DSARs, and vendor reviews while guiding audit readiness.

You will collaborate with Legal, Data Governance, Information Security, Product, and Engineering to ensure scalable privacy controls and evidence-ready documentation across evolving frameworks.

Qualifikationen

• Degree-level qualification in Law, Data Protection, Information Security, Compliance or Risk.
• At least 2 years in a data privacy/compliance role in tech/SaaS.
• Solid knowledge of EU GDPR, risk and compliance.
• Ability to work independently and manage multiple workstreams in a dynamic environment.
• Experience supporting DPIAs, DSARs, ROPAs, incidents and vendor privacy reviews.
• Proven ability translating regulatory requirements into practical controls.
• Strong cross-functional communication and stakeholder management.
• Detail-oriented with strong analytical and organizational skills.

Aufgaben

• Support the privacy workstream of the compliance roadmap and ensure legal, regulatory, and reputational responsibilities are met.
• Lead data mapping, risk management, controls testing, and policy development.
• Lead DPIAs on products, systems, and processes, embedding Privacy-by-Design from the outset.
• Manage DSARs and data deletion requests with system owners for quality and timeliness.
• Identify privacy risks and translate them into practical business processes.
• Address privacy-focused vendor security inquiries with Legal.
• Maintain Knowledge Base and Trust Centre with up-to-date compliance documentation.
• Conduct internal Vendor Security Reviews to assess privacy risks.
• Develop and maintain internal privacy policies, external notices, and governance reporting.
• Lead privacy assurance activities supporting audits (ISO 27701, ISO 27001, ISAE 3000, SOC 2) and manage central evidence in GRC tools.
• Monitor regulatory developments and liaise with regulators and counsel on cross-jurisdictional matters.

Kenntnisse

Stakeholder management

Analytical skills

Communication skills

Independent work

Ausbildung

Degree in Law/Data Protection/InfoSec/Compliance or Risk

Tools

OneTrust

Vanta

Jobbeschreibung

Every mind is unique. Yet much of the world is still built for what’s considered "normal," leaving too many people behind. At Everway, we change that by creating technology that helps everyone understand and be understood. By understanding and addressing the unique needs of each individual, we're creating a world where differences are recognized and valued.

Our careers fit real life. When you join us, you’re not just taking a job. You’re joining a movement to build a more neuroinclusive world. We’re a global community of over 800 employees spanning North America, UK, Europe, Australia, and New Zealand. A career here is purposeful and fast-moving, with clear expectations, modern tools, and the clarity to focus on what matters most.

Our people are supported and encouraged to show up as they are, with different ways of thinking welcomed and valued. We pride ourselves on our core values that are embedded within our culture. These are to be curious, have courage, and commit fully.

Join us at Everway - together, we can unlock the full potential of every mind.

About the role

The Privacy Assurance & Compliance Specialist will manage and support the day-to-day delivery of Everway’s global privacy assurance and compliance programme, supporting the Director of Compliance in their capacity as Data Protection Officer (DPO).

The role will help ensure that privacy and data protection requirements are embedded into Everway’s products, systems and business processes and that privacy risks, controls and regulatory obligations are effectively identified, managed, monitored and evidenced.

Working closely with Legal, Data Governance, Information Security, Product, Engineering, People and other business teams, the role will provide practical privacy guidance and independent compliance oversight while helping Everway maintain a scalable and audit-ready privacy programme across evolving frameworks.

The role is focused on privacy assurance, risk, governance and compliance. Legal retains responsibility for contractual privacy matters and legal advice, while business and data owners remain accountable for the data and processing activities within their areas.

Main Responsibilities

• Supporting the Director Compliance, to implement and deliver the privacy workstream of the compliance roadmap, ensuring the company meets its legal, regulatory and reputational responsibilities.
• Support and lead specific workstreams within the Compliance roadmap and business improvement projects/initiatives, for example data mapping, risk management, controls testing and policy development.
• Lead and coordinate Data Protection Impact Assessments (DPIAs) on products, systems, and processes, tracking risk treatments and embedding Privacy-by-Design from the outset.
• Manage the framework for Data Subject Access Requests (DSARs) and Data Deletion Requests, ensuring robust processes with system owners to assure quality and timeliness.
• Identify privacy risks and controls, translating them into practical business processes to improve organisational compliance and supporting incident management.
• Address privacy-focused vendor security inquiries from customers and collaborate with Legal on related requests.
• Maintain and enhance the Knowledge Base and Trust Centre resources to ensure up-to-date compliance documentation.
• Conduct comprehensive internal Vendor Security Reviews to assess and mitigate third-party privacy risks.
• Develop, implement and maintain internal privacy policies, external privacy notices, procedures and ELT/governance reporting including KPIs.
• Lead privacy assurance activities supporting audit and certification initiatives (eg ISO 27701, ISO 27001, ISAE 3000, SOC 2) and manage central evidence within GRC tools.
• Monitor regulatory developments, assist with regulator/auditor interactions, and liaise with external and internal legal counsel as applicable on cross-jurisdictional privacy matters.

Essential Criteria

• Degree level (or equivalent) qualification in a related discipline (eg Law, Data Protection, Information Security, Compliance or Risk)
• 2+ years experience in a similar role in data privacy compliance or privacy assurance role, ideally within a software, SaaS or international tech environment.
• Sound working knowledge of EU GDPR, including risk and compliance management
• Ability to work independently and effectively manage and prioritise workstreams in a dynamic environment.
• Practical experience supporting DPIAs, DSAR/data deletion requests, ROPAs, incident response, and vendor privacy reviews.
• Proven experience translating regulatory requirements into clear, practical business processes and controls.
• Strong cross-functional stakeholder management and communication skills.
• Detail-oriented with strong analytical, problem-solving, and organizational skills.

Desirable Criteria

• Experience working within a SaaS, Edtech or software development environment
• Knowledge of ISO 27001, ISO 27701, ISAE 3000, ISO 42001 or SOC 2 frameworks
• Familiarity with GRC platforms (such as Vanta, One Trust)
• Relevant privacy or audit qualifications (e.g., CIPP/E, CIPM, or ISO internal auditor training).
• Proficiency with Google Workspace, docs, chat, drive

Please submit your application by Thursday 15th October 2026.

#everwayJoin our team and enjoy a competitive salary with bonus opportunities, flexible work schedules, and comprehensive health and wellness benefits. We offer flexible time off plans, career growth through development programs, and a collaborative, innovative culture where your ideas matter.

We are committed to providing a Drug-Free Workplace for all employees.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.

You can view our Recruitment and Selection Policy here.