Senior Privacy & Data Security Specialist (DSR Lead)

Quo; San Francisco (CA); Remote; USD 168,000 - 220,000; Full time

Benefits offered by this job

Equity

Medical coverage

Monthly lifestyle stipend

Flexible PTO

Job summary

Quo is a remote-first platform transforming how small businesses connect with customers. We are seeking a Senior Privacy & Information Security Specialist to own Quo’s privacy and data governance program, turning regulatory requirements into practical controls while coordinating across Support, Marketing, Legal, and Engineering.

You will drive DSR operations, data inventory, retention, consent management, and risk assessments, ensuring audit-ready documentation and scalable privacy programs.

Qualifications

• Significant experience in privacy operations, privacy engineering, data governance, or GRC.
• Working knowledge of CCPA/CPRA and PIPEDA.
• Ability to map data flows to technical controls and repeatable procedures.
• Strong written communication and judgment with sensitive, time-sensitive requests.
• Ability to drive cross-team work without direct authority across Legal, Support, Marketing, Product, and Engineering.

Responsibilities

• Own end-to-end DSR lifecycle: intake, verification, fulfillment, and closure across systems.
• Build SLOs, dashboards, and reporting on DSR volume and deadlines.
• Define escalation paths and audit-ready decision records for complex requests.
• Develop training and playbooks for teams handling DSRs.
• Maintain data inventories and data-flow maps across production, analytics, marketing, support, and third parties.
• Review privacy risks for new products/vendors and manage DPIAs/DPAs.
• Support privacy policy development, risk assessments, and audit evidence collection.

Skills

Privacy operations

Privacy engineering

Data governance

GRC

DSR workflows

Job description

Quo is a remote-first platform transforming how small businesses connect with customers. We are seeking a Senior Privacy & Information Security Specialist to own Quo’s privacy and data governance program, turning regulatory requirements into practical controls while coordinating across Support, Marketing, Legal, and Engineering.

You will drive DSR operations, data inventory, retention, consent management, and risk assessments, ensuring audit-ready documentation and scalable privacy programs.