Alation - Senior Privacy Specialist

About Alation :

Customers trust the Alation Data Intelligence Platform for self-service analytics, cloud transformation, data governance, and AI-ready data, fostering data-driven innovation at scale.

With more than $340M in funding - valued at over $1.

7 billion and nearly 600 customers, including 40% of the Fortune 100 Alation helps organizations realize value from data and AI initiatives.

Alation has been recognized in 2024 as one of Inc. Magazine's Best Workplaces for the fifth time, a testament to our commitment to creating an inclusive, innovative, and collaborative environment.

Collaboration is at the forefront of everything we do.

We strive to bring diverse perspectives together and empower each team member to contribute their unique strengths to live out our values each day.

These are : Move the Ball, Build for the Long Term, Listen Like You're Wrong, and Measure Through Customer Impact.

Joining Alation means being part of a fast-paced, high-growth company where every voice matters, and where we're shaping the future of data intelligence with AI-ready data.

Join us on our journey to build a world where data culture thrives and curiosity is celebrated each day!

Job Description :

Alation is seeking a detail-oriented and experienced senior privacy professional who will play a pivotal role in ensuring the company's privacy strategy is robust, compliant, and aligned with industry best practices.

This role will drive, build, and lead the development of the company's privacy program to ensure compliance with GDPR, CCPA, and CPRA, and will drive the implementation of ISO 2701,8 and manage the existing ISO 27701 certification.

This role requires deep expertise in privacy regulations, SaaS environments, and cloud-based systems.

You will sit in the Legal Department and collaborate with cross-functional teams, including Security, IT, Product, Engineering, and Marketing, to assess, implement, and maintain privacy controls across our platforms and operations.

Responsibilities :

• Lead the implementation of ISO 27018 : 2019 standard, ensuring that privacy controls are integrated within the Information Security Management System (ISMS).
• Provide guidance to internal stakeholders to ensure adherence to privacy-related requirements under ISO 27018
• Oversee the maintenance and continuous improvement of the company's ISO 27701 certification.
• Manage internal and external audits, ensuring compliance with ISO 27701's information security management practices.
• Develop and implement corrective actions based on audit findings and security assessments.
• Build and mature the company's privacy program to ensure compliance with global privacy laws, including GDPR, CCPA, and CPR, and emerging privacy regulations across key markets.
• Lead and manage data privacy impact assessments (DPIAs) for new projects, products, and services.
• Advise the company on best practices related to data retention, user consent management, data breach notification, and privacy by design.
• Design, develop, and implement company-wide privacy policies and procedures to ensure compliance across the business.
• Work closely with legal, product, security, and engineering teams to integrate privacy and security controls into product development cycles.
• Lead privacy awareness and training programs for employees, ensuring alignment with evolving privacy laws and company policy.
• Lead the company's response to data breaches or privacy incidents, including notifications to regulators and affected individuals as necessary.
• Maintain breach documentation and assess root causes to mitigate future risks.

Requirements :

Skills :

Preferred :

(ref : hirist.tech)