Alation - Senior Privacy Specialist - ISMS

Description :

Alation is seeking a detail-oriented and experienced senior privacy professional who will play a pivotal role in ensuring the company's privacy strategy is robust, compliant, and aligned with industry best practices. This role will drive, build, and lead the development of the company's privacy program to ensure compliance with GDPR, CCPA, and CPRA, and will drive the implementation of ISO 2701,8 and manage the existing ISO 27701 certification. This role requires deep expertise in privacy regulations, SaaS environments, and cloud-based systems. You will sit in the Legal Department and collaborate with cross-functional teams, including Security, IT, Product, Engineering, and Marketing, to assess, implement, and maintain privacy controls across our platforms and operations.

Responsibilities :

• Lead the implementation of ISO 27018 : 2019 standard, ensuring that privacy controls are integrated within the Information Security Management System (ISMS).
• Provide guidance to internal stakeholders to ensure adherence to privacy-related requirements under ISO 27018
• Oversee the maintenance and continuous improvement of the company's ISO 27701 certification.
• Manage internal and external audits, ensuring compliance with ISO 27701's information security management practices.
• Develop and implement corrective actions based on audit findings and security assessments.
• Build and mature the company's privacy program to ensure compliance with global privacy laws, including GDPR, CCPA, and CPR, and emerging privacy regulations across key markets.
• Lead and manage data privacy impact assessments (DPIAs) for new projects, products, and services.
• Advise the company on best practices related to data retention, user consent management, data breach notification, and privacy by design.
• Design, develop, and implement company-wide privacy policies and procedures to ensure compliance across the business.
• Work closely with legal, product, security, and engineering teams to integrate privacy and security controls into product development cycles.
• Lead privacy awareness and training programs for employees, ensuring alignment with evolving privacy laws and company policy.
• Lead the company's response to data breaches or privacy incidents, including notifications to regulators and affected individuals as necessary.
• Maintain breach documentation and assess root causes to mitigate future risks.

Requirements :

Skills :

Preferred :

(ref : hirist.tech)