Senior Privacy & Data Governance Lead — Remote

Quo; Oregon; Hybrid; USD 168,000 - 220,000; Full time

Job summary

Quo is hiring a Senior Privacy & Information Security Specialist to own the privacy and data governance program, focusing on a fast, defensible DSR process. The role turns regulatory requirements under CCPA/CPRA and PIPEDA into working controls and coordinates across Support, Marketing, Legal, and Engineering.

You will build data inventories, data-flow maps, and controls for data minimization, retention, consent, and AI/ML data usage; review new products for privacy risk; and drive automation of

Qualifications

• Significant experience in privacy operations, privacy engineering, data governance, or GRC.
• Working knowledge of CCPA/CPRA and PIPEDA; APIs, databases, identity systems, SaaS and cloud environments.
• Able to translate regulatory requirements into technical controls and repeatable procedures.
• Strong written communication and sound judgment with sensitive, time-sensitive requests.
• Able to drive cross-team work without direct authority across Legal, Support, Marketing, Product, and Engineering.

Responsibilities

• Own the end-to-end DSR lifecycle: intake, verification, fulfillment and closure across systems.
• Build training, playbooks, and documentation for teams handling requests.
• Define escalation paths and fast-track handling for high-risk requests.
• Maintain audit-ready records of decisions and ensure compliance with deadlines.

Skills

Privacy operations

Data governance

GRC

Cross-team collaboration

Regulatory interpretation

Education

CIPP/US

CIPP/C

CIPM

CISSP

Tools

APIs

Databases

Identity systems

SaaS

Cloud environments

Job description

Quo is hiring a Senior Privacy & Information Security Specialist to own the privacy and data governance program, focusing on a fast, defensible DSR process. The role turns regulatory requirements under CCPA/CPRA and PIPEDA into working controls and coordinates across Support, Marketing, Legal, and Engineering.

You will build data inventories, data-flow maps, and controls for data minimization, retention, consent, and AI/ML data usage; review new products for privacy risk; and drive automation of