Director, Global Privacy Program

About this role

Overview
We are seeking a Global Privacy Program Director with 7+ years of relevant privacy experience to coordinate day-to-day privacy program operations and implementation under the direction of the Deputy General Counsel, Global Privacy, Cybersecurity and AI Governance Officer; Chief Privacy Officer. This full-time role requires a highly responsive, prepared, technology-aware, and business-oriented privacy professional who can translate privacy strategy, regulatory obligations, emerging AI requirements, and leadership priorities into practical controls, policies, workflows, notices, and operating guidance across the United States, EMEA, and other global markets. Consilio is a global legal services and eDiscovery solutions provider supporting large corporations and law firms across the United States, United Kingdom, Europe and Asia Pacific.
The Director, Global Privacy Program will report to the Deputy General Counsel, Global Privacy, Cybersecurity and AI Governance Officer; Chief Privacy Officer. The successful candidate will be responsible for assisting with day-to-day program operations, operational delivery, and cross-functional implementation, with program direction, strategy, executive reporting, final risk decisions, and enterprise privacy accountability retained by the Chief Privacy Officer.
Responsibilities
The successful candidate will:

• Coordinate day-to-day execution and continuous improvement of Consilio’s global privacy and data-protection program in alignment with the strategy, priorities, and risk direction set by the Chief Privacy Officer, including policies, standards, procedures, controls, issue tracking, testing, and remediation.

• Implement privacy governance processes, decision records, escalation pathways, and accountability mechanisms approved by the Chief Privacy Officer to ensure privacy issues are identified, owned, tracked, and resolved in a timely manner.

• Operate with a high degree of independence on day-to-day program execution, using sound judgment to prioritize work, make practical recommendations, and escalate material legal, regulatory, client, or enterprise risk issues to the Chief Privacy Officer.

• Provide practical program support and operational guidance on GDPR, UK GDPR, U.S. state privacy laws, and other global privacy and data protection requirements.

• Assist in tracking privacy, cybersecurity, AI, and data-governance developments and prepare practical recommendations, roadmap updates, training, templates, notices, and operational control enhancements for review and direction by the Chief Privacy Officer.

• Apply emerging AI laws, regulations, regulatory guidance, and company AI governance requirements to privacy program activities, including policy updates, just-in-time notices, DPIA/PIA enhancements, data-use reviews, and practical evaluation of AI-related privacy risk.

• Partner closely with Legal, Information Security, IT, Product, Operations, Sales, HR, and client-facing teams to embed privacy-by-design into new products, services, client solutions, vendor relationships, and internal initiatives.

• Partner effectively with regional stakeholders, including EMEA Legal, Security, Operations, and client-facing teams, to address GDPR, UK GDPR, cross-border transfer, and other regional privacy requirements as part of the broader global privacy program.

• Maintain, refresh, and mature core privacy program elements on an ongoing basis, including records of processing, data maps, DPIA/PIA processes, privacy notices, consent and rights processes, data retention, cross-border transfer assessments, training, audit readiness, and related transfer compliance controls.

• Identify opportunities to automate privacy operations where practical, including intake, workflow, reporting, evidence collection, reminders, control tracking, and other repeatable privacy program activities.

• Develop and maintain global privacy policies, procedures, playbooks, templates, training, and communications that are clear, practical, and aligned with business operations.

• Support operational privacy risk review in commercial, client, vendor, supplier, and technology matters, including DPAs, data processing terms, security/privacy questionnaires, data-use restrictions, audit rights, AI-enabled services, just-in-time notices, and sensitive data use cases, with escalation of material privacy, AI, client, regulatory, or enterprise risk issues to the Chief Privacy Officer.

• Support privacy incident readiness and response by partnering with Legal, Security, and business stakeholders to assess risk, coordinate response activities, and document outcomes.

• Maintain privacy program metrics, dashboards, control testing, remediation plans, and risk reporting inputs to support Chief Privacy Officer-led executive readouts, roadmap decisions, and leadership reporting.

• Support regulatory inquiries, investigations, audits, and information requests by coordinating documentation, facts, timelines, evidence, and draft response materials for Chief Privacy Officer review and direction.

Qualifications

• Minimum 7+ years of relevant privacy, data protection, compliance, technology law, and/or privacy operations experience.

• Deep, practical knowledge of GDPR is required, together with strong familiarity with UK GDPR, EMEA privacy requirements, U.S. state privacy laws, international transfer requirements, data governance, privacy operations, and privacy risk management.

• IAPP certification strongly preferred, including CIPP/E and/or CIPP/US; CIPM, CIPT, or other recognized privacy, data protection, or security certifications are a plus.

• D., equivalent legal qualification, or comparable advanced privacy, compliance, or technology credential preferred.

• Excellent drafting, communication, and training skills, with the ability to translate complex privacy requirements into clear, actionable guidance for legal, technical, and business audiences.

• Strong business…