Privacy Director

Veracross; Wakefield (MA); On-site; USD 140,000 - 145,000; Full time

Benefits offered by this job

3 weeks vacation per year

14 paid holidays per year

56 hours paid sick leave annually

Medical, Dental & Vision

401(k) with company match

Job summary

Veracross, a global SaaS provider for independent K-12 schools, seeks a Privacy Director to lead and mature our data protection program across the company. You will collaborate with IT and operations to ensure GDPR, CCPA, FERPA compliance, perform DPIAs, manage privacy incidents, and educate staff on privacy-by-design practices.

Reporting to the CISO, you will act as the primary point of contact for regulators and individuals, staying current with evolving privacy laws and driving a culture of

Qualifications

• Strong knowledge of global privacy laws and regulations, including GDPR and CCPA.
• Experience building and managing data protection and privacy programs in SaaS environments.
• Knowledge of data privacy impact assessments (DPIA) and incident response processes.
• Excellent communication and presentation skills.
• Ability to collaborate effectively with cross-functional teams.
• Attention to detail and strong analytical skills.
• Privacy certifications such as CIPP/E or CIPP/US preferred.
• Eligibility to work in the US.

Responsibilities

• Develop and maintain Veracross' data protection and privacy program.
• Ensure compliance with GDPR, CCPA, FERPA, COPPA, and related regulations.
• Create and update privacy policies, procedures, and guidelines.
• Conduct privacy impact assessments and monitor ongoing compliance.
• Manage and respond to data privacy incidents and data subject requests.
• Educate employees on data privacy best practices across the organization.
• Collaborate with cross-functional teams to implement privacy by design principles.
• Serve as the primary contact for regulators and individuals on privacy matters.
• Stay up to date with emerging global privacy trends, laws, and regulations.

Skills

Privacy regulations knowledge

Privacy program leadership

DPIAs & incident response

Communication skills

Cross-functional collaboration

Attention to detail

Privacy certifications (CIPP/E or CIPP

US work eligibility

Job description

Veracross provides SaaS-based School Information Systems (SIS) designed to meet the specific needs of independent K-12 schools worldwide. Our one-record solution combines the power of a fully integrated single-record database, personalized communication tools, and an elegant architecture that is unique in our industry.

We are a growing, values-led community of employees in the US, UK and Australia who share a vision to unify school communities, improve the quality of education, and enhance learning.

Veracross is five product brands in one global tech company.

• Veracross SIS is a one-person, one-record school management platform
• Magnus Health provides cloud-based Student Health Record (SHR) solutions
• Digistorm connects with their communities through Digistorm Websites, Digistorm Funnel, and Digistorm Apps.
• Epraise incentivizes student well-being and connects teachers, students, and families.
• Firefly provides an online learning space for students and teachers

Company Overview

Veracross provides SaaS-based School Information Systems (SIS) designed to meet the specific needs of independent K-12 schools worldwide. Our one-record solution combines the power of a fully integrated single-record database, personalized communication tools, and an elegant architecture that is unique in our industry.

Job Description

As the Privacy Director, you will be responsible for overseeing and managing Veracross' data protection and privacy program. You will work closely with cross-functional teams, including IT, and business operations, to ensure compliance with privacy laws and regulations, develop and maintain privacy policies and procedures, and educate employees on data privacy best practices.

You will be responsible for conducting privacy impact assessments, managing data privacy incidents, and responding to data subject requests. You will also serve as the primary point of contact for regulatory authorities and individuals regarding privacy-related matters. This position reports to the CISO.

Responsibilities

• Develop and maintain Veracross' data protection and privacy program
• Ensure compliance with relevant global privacy laws and regulations, including GDPR and CCPA
• Create and update privacy policies, procedures, and guidelines
• Conduct privacy impact assessments and monitor ongoing compliance
• Manage and respond to data privacy incidents and data subject requests
• Educate employees on data privacy best practices and raise awareness throughout the organization
• Collaborate with cross-functional teams to implement privacy by design principles
• Serve as the primary point of contact for regulatory authorities and individuals regarding privacy-related matters
• Stay up to date with emerging global privacy trends, laws, and regulations

Requirements

• Strong knowledge of global privacy laws and regulations, including GDPR and CCPA
• Experience developing and managing data protection and privacy programs in SaaS business environment
• Knowledge of data privacy impact assessments and incident response processes
• Excellent communication and presentation skills
• Ability to collaborate effectively with cross-functional teams
• Attention to detail and strong analytical skills
• Privacy certification such as CIPP/E or CIPP/US is preferred
• Eligibility to work in the US

Key Job Requirements

• 3 - 6 years of relevant global privacy experience in SaaS and/or educational setting
• 3 - 6 years of experience in privacy, legal, cybersecurity, compliance or related fields
• Deep understanding of global privacy laws/regulations to include GDPR, CCPA, PIPEDA, data protection frameworks and privacy industry best practices
• Familiarity with relevant student privacy laws including but not limited to FERPA, COPPA, PPRA
• Experience building a privacy program, supporting and/or administering one
• Experience conducting privacy impact assessments, privacy evaluation techniques and compliance
• Experience developing, delivering and overseeing privacy training and awareness activities
• Proven experience executing data and privacy program controls
• Exposure to AI governance, digital marketing privacy or emerging technology regulations
• Privacy certifications CIPP/E or CIPP/US preferred

Benefits

• 3weeks of vacationper year
• 14 paid holidays per year (including the week off between Christmas and New Year's Eve)
• 56 Hours of paid sick leave annually
• Top tier benefits -
  • Medical, Dental & Vision (Blue Cross Blue Shield & EyeMed)
  • Veracross LLC Fidelity 401(k) Plan with Company match

Salary at Veracross is determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience. The compensation range for this position is $140k to $145k (annualized USD) in addition to annual bonus.

We value the power of an inclusive culture and a strong sense of belonging. Consideration and respect are the norm; and all team members are supported in reaching their full potential.