[Hiring] Data Privacy Manager @KLDiscovery

Role Description

The Data Privacy Manager (“Privacy Manager”) is responsible for managing, coordinating, and generally implementing KLDiscovery’s data protection strategy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”), the UK Data Protection Act 2018, and US State privacy laws including the California Consumer Privacy Act (“CCPA”) and Health Insurance Portability and Accountability Act (“HIPAA”). The Privacy Manager will act as the internal lead for KLDiscovery on data privacy queries, serve as the primary point of contact for data subjects and regulatory authorities, provide expert advice on data protection matters, undertake implementation of data privacy initiatives, ensure compliance with KLDiscovery policies, and support KLDiscovery in managing risks associated with the processing of personal data for clients and employees.

Key Responsibilities

• Compliance Monitoring and Advisory:
  • Monitor compliance against global data protection laws and internal policies, procedures, and controls, both for clients and employees.
  • Advise KLDiscovery and its employees on data protection obligations and best practices.
  • Monitor emerging trends, legislative changes, and guidance relating to data privacy, particularly involving the use of artificial intelligence.
• Risk and Assessment:
  • Conduct regular audits, risk assessments, and reviews of data processing activities including vendor due diligence as it relates to Data Privacy Assessments.
  • Co-ordinate and manage Data Protection Impact Assessments (“DPIAs”), Transfer Impact Assessments (“TIAs”), Legitimate Interest Assessments (“LIAs”) and advise on mitigating risks for both product and internal initiatives.
  • Maintain KLDiscovery’s compliance with cross-border data transfer requirements, including the Data Privacy Framework (“DPF”), Schrems II obligations, and any successor or equivalent transfer mechanisms.
• Records and Documentation:
  • Own and maintain the Records of Processing Activities (“ROPA”) as required by law on a per country basis, covering all business units.
  • Develop and maintain data protection policies, privacy notices, and supporting documentation.
  • Assist in the development of contractual frameworks for clients and providing advice on best practices.
• Data Subject and Regulatory Liaison:
  • Serve as the primary contact for data subjects regarding data protection queries, complaints, and requests, including Subject Access Requests (“SARs”), with responses managed within applicable statutory timeframes and data deletion.
  • Act as the primary liaison with supervisory authorities and facilitate communication in the event of a data breach or investigation.
  • Support the cybersecurity incident response process by providing expert guidance on breach classification, notification obligations, and regulatory reporting requirements across applicable jurisdictions including GDPR, HIPAA, DORA, NIS2, and US state laws.
• Governance, Training and Awareness:
  • Deliver KLDiscovery’s data protection training and awareness programme.
  • Monitor changes in privacy laws and advise the organization accordingly.
  • Client and commercial support answering data privacy questions from clients as part of client RFPs and due diligence process and questionnaires.
  • Support KLD's AI governance framework and EU AI Act compliance readiness, including reviewing AI-driven data processing activities for privacy risk and control adequacy.

Qualifications

• Minimum of 5 years’ experience in a dedicated privacy role, such as a privacy manager or equivalent, in an international business, preferably SaaS.
• A degree in law, information security, IT, compliance, or a related field.
• Professional certification in data protection or privacy (e.g., CIPP/E, CIPM, GDPR Practitioner).
• Expert knowledge of GDPR, UK Data Protection Act 2018, US State privacy laws as well as HIPAA and other relevant legislation. An AI Act or AI governance certification (e.g., AIGP) is an advantage. Experience with ITAR is a plus.
• Experience conducting security and privacy audits, risk assessments, records of processing activities, DPIAs, and managing data protection projects.
• Ability to translate privacy requirements into practical operational guidance for product and internal teams.
• Excellent communication, analytical, and problem-solving skills.
• Ability to manage sensitive information with discretion and integrity.

Personal Attributes

• Meticulous attention to detail.
• Proactive and adaptable approach to work.
• Ability to work independently and collaboratively.
• Strong ethical standards and commitment to safeguarding privacy.
• Confidence to challenge practices and promote compliance across the organization.

Reporting Line

The Privacy Manager reports directly to the General Counsel and works closely with IT, Cybersecurity, Legal, Marketing, Product, and People & Culture Teams and has access to the highest levels of decision-making within the organization.

Location and Working Hours

This position is remote.

Remuneration

Competitive salary commensurate with experience, plus benefits package.

Company Description

KLDiscovery is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, creed, religion, national origin, ancestry, sex, gender identity, gender expression, sexual orientation, marital or family status, pregnancy, age, veteran status, disability, genetic information, or any other characteristic protected by applicable law. This commitment applies to all aspects of employment, including recruitment, hiring, compensation, promotion, training, discipline, and termination. Employment decisions are based on job-related qualifications, skills, and experience.