Privacy Director

RiseMe; Wakefield (MA); On-site; USD 140,000 - 145,000; Full time

Benefits offered by this job

Vacation time

Paid holidays

Sick leave

Medical, Dental & Vision

401(k)

Job summary

Veracross is seeking a Privacy Director to oversee the global data protection program. You will partner across IT and operations to ensure regulatory compliance, develop privacy policies, and educate staff on best practices.

The role reports to the CISO and focuses on privacy by design across the organization. Your responsibilities include conducting privacy impact assessments, handling incidents, and acting as the liaison with regulators and individuals on privacy matters.

Qualifications

• Strong knowledge of global privacy laws including GDPR, CCPA, and other major regimes.
• Experience building privacy programs for SaaS environments.
• Excellent written and verbal communication skills.
• Ability to collaborate with IT, security, legal, and operations teams.
• Privacy certifications (CIPP/E or CIPP/US) preferred.
• Eligible to work in the US.

Responsibilities

• Develop and manage Veracross' data protection and privacy program.
• Ensure compliance with global privacy laws and regulations.
• Draft and update privacy policies, procedures, and guidelines.
• Conduct privacy impact assessments and monitor compliance.
• Manage privacy incidents and data subject requests.

Skills

Data privacy

GDPR/CCPA

Communication

Cross-functional

AI governance

Education

Bachelor's or relevant degree

Tools

GRC tools

Job description

Company Overview

Veracross provides SaaS-based School Information Systems (SIS) designed to meet the specific needs of independent K-12 schools worldwide. Our one-record solution combines the power of a fully integrated single-record database, personalized communication tools, and an elegant architecture that is unique in our industry.

We are a growing, values-led community of employees in the US, UK and Australia who share a vision to unify school communities, improve the quality of education, and enhance learning.

Veracross is five product brands in one global tech company

• Veracross SISis a one-person, one-record school management platform
• Magnus Healthprovides cloud-based Student Health Record (SHR) solutions
• Digistormconnects with their communities throughDigistormWebsites,DigistormFunnel, andDigistormApps.
• Epraiseincentivizes student well-being and connects teachers, students, and families.
• Fireflyprovides an online learning space for students and teachers

Job Description

As the Privacy Director, you will be responsible for overseeing and managing Veracross' data protection and privacy program. You will work closely with cross-functional teams, including IT, and business operations, to ensure compliance with privacy laws and regulations, develop and maintain privacy policies and procedures, and educate employees on data privacy best practices.

You will be responsible for conducting privacy impact assessments, managing data privacy incidents, and responding to data subject requests. You will also serve as the primary point of contact for regulatory authorities and individuals regarding privacy-related matters. This position reports to the CISO.

Responsibilities

• Develop and maintain Veracross' data protection and privacy program.
• Ensure compliance with relevant global privacy laws and regulations, including GDPR and CCPA.
• Create and update privacy policies, procedures, and guidelines.
• Conduct privacy impact assessments and monitor ongoing compliance.
• Manage and respond to data privacy incidents and data subject requests.
• Educate employees on data privacy best practices and raise awareness throughout the organization.
• Collaborate with cross-functional teams to implement privacy by design principles.
• Serve as the primary point of contact for regulatory authorities and individuals regarding privacy-related matters.
• Stay up to date with emerging global privacy trends, laws, and regulations.

• Strong knowledge of global privacy laws and regulations, including GDPR and CCPA.
• Experience developing and managing data protection and privacy programs in SaaS business environment
• Knowledge of data privacy impact assessments and incident response processes.
• Excellent communication and presentation skills.
• Ability to collaborate effectively with cross-functional teams.
• Attention to detail and strong analytical skills.
• Privacy certification such as CIPP/E or CIPP/US is preferred.
• Eligibility to work in the US.

Key Job Requirements

• 3 – 6 years of relevant global privacy experience in SaaS and/or educational setting
• 3 - 6 years of experience in privacy, legal, cybersecurity, compliance or related fields
• Deep understanding of global privacy laws/regulations to include GDPR, CCPA, PIPEDA, data protection frameworks and privacy industry best practices

• Familiarity with relevant student privacy laws including but not limited to FERPA, COPPA, PPRA
• Experience building a privacy program, supporting and/or administering one
• Experience conducting privacy impact assessments, privacy evaluation techniques and compliance
• Experience developing, delivering and overseeing privacy training and awareness activities
• Proven experience executing data and privacy program controls
• Exposure to AI governance, digital marketing privacy or emerging technology regulations
• Privacy certifications CIPP/E or CIPP/US preferred

• 3weeks of vacationper year
• 14 paid holidays per year (including the week off between Christmas and New Year's Eve)
• 56 Hours of paid sick leave annually
• Top tier benefits -
  • Medical, Dental & Vision (Blue Cross Blue Shield & EyeMed)
  • Veracross LLC Fidelity 401(k) Plan with Company match

Salary at Veracross is determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience. The compensation range for this position is $140k to $145k (annualized USD) in addition to annual bonus.

We value the power of an inclusive culture and a strong sense of belonging. Consideration and respect are the norm; and all team members are supported in reaching their full potential.