Senior Privacy & Data Security Specialist (DSR Lead)

Quo; New York (NY); À distance; USD 168 000 - 198 000; Plein temps

Avantages offerts par ce poste

Equity

Medical coverage

Lifestyle stipend

Flexible PTO

Résumé du poste

Quo is seeking a Senior Privacy & Information Security Specialist to own the privacy and data governance program, focusing on a fast, defensible DSR process. This senior IC role translates CCPA/CPRA and PIPEDA requirements into working controls and coordinates across Support, Marketing, Legal, and Engineering.

You will lead end-to-end DSR lifecycle, build dashboards, and define escalation paths while maintaining audit-ready records of decisions. Strong cross-team collaboration is essential.

Qualifications

• Significant experience in privacy operations, privacy engineering, data governance, or GRC across multiple systems.
• Working knowledge of CCPA/CPRA and PIPEDA, and modern APIs, databases, identity systems, SaaS and cloud environments.
• Ability to map data flows and translate regulatory requirements into technical controls and repeatable processes.

Responsabilités

• Own DSR operations lifecycle: intake, verification, fulfillment, and closure across systems.
• Build training, playbooks, and documentation for teams handling requests.
• Develop data inventories and data-flow maps across production, analytics, marketing, and third parties.
• Maintain controls for data minimization, retention, consent, and data deletion, incl. AI/ML data handling.
• Support privacy policy development, risk assessments, audits, and incident response timelines.

Connaissances

Privacy operations

Privacy engineering

Data governance

GRC

Cross-team collaboration

Regulatory knowledge

Formation

CIPP/US

CIPP/C

CIPT

CIPM

CISSP

CISA

CRISC

Outils

SOC 2

ISO 27001/27701

NIST CSF

Description du poste

Quo is seeking a Senior Privacy & Information Security Specialist to own the privacy and data governance program, focusing on a fast, defensible DSR process. This senior IC role translates CCPA/CPRA and PIPEDA requirements into working controls and coordinates across Support, Marketing, Legal, and Engineering.

You will lead end-to-end DSR lifecycle, build dashboards, and define escalation paths while maintaining audit-ready records of decisions. Strong cross-team collaboration is essential.