Global Privacy Specialist

We are Progress (Nasdaq: PRGS) - the trusted provider of software that enables our customers to develop, deploy and manage responsible, AI-powered applications and experience with agility and ease.  Learn more about us. 

We’re proud to have a diverse, global team where we value the individual and enrich our culture by considering varied perspectives because we believe people power progress. Join us as a Global Privacy Specialist  and help us do what we do best: propelling business forward.   

The successful candidate for this position, as a member of the Progress Software Legal Department, Enterprise Legal Services team, will be responsible for advising management and other internal clients with respect to a wide variety of privacy-related business, compliance and operational issues. The responsibilities will include (without limitations) providing guidance and practical solutions within the company to ensure that regulatory and contractual obligations are met with respect to data protection, security and privacy; maintaining and implementing corporate and customer facing privacy-related notices, policies, guidelines and other process documentation; supporting Progress’ Commercial Legal Services Team in the negotiation of privacy-related terms in customer and vendor agreements; providing guidance on other privacy concerns in connection with onboarding and managing vendors and other third parties; driving deliverables needed for data inventory/data mapping initiatives; collaborating with other organizations (IT, Marketing, Engineering, Product Management, Information Security, etc.) to ensure necessary controls, documentation and objectives are met. In particular, but not limited to:  

In this role, you will:  

• Play an active role in responding to data subject requests, customer privacy questionnaires. 
• Own data mapping and inventory efforts related to processors, sub processors, and records of processing activities. 
• Operationalize privacy requirements by managing processes and tools related to data handling and compliance. 
• Support the design and implementation of a global privacy framework and program across the organization, including compliance with applicable privacy laws, international data transfers requirements and guidelines. 
• Provide guidance on data protection matters, monitoring compliance with the applicable privacy laws arising from the operational business needs of various functions such as marketing, HR, procurement, IT, Product Management, Engineering and others. 
• Participate and deliver results in privacy compliance and enablement projects related to the implementation and improvement of controls and processes intended to embed privacy into operations, including without limitation privacy reviews, privacy aspects in AI governance, privacy or data protection impact assessment, risk assessments, transfer impact assessments and other similar. 
• Assist in responding to and assessing cybersecurity incidents and/or data protection breaches. 
• Assist in drafting, implementing, and updating data privacy clauses, privacy and security terms, data protection agreements, playbooks, guidelines and support to the business stakeholders. 
• Support in due diligence and integration activities related to M&A. 
• Supports privacy and data security reviews relating to AI initiatives. 
• Conduct privacy training and awareness campaigns for various business functions. 
• The role is broad and involves advising our business on privacy or security as it relates to global privacy and emerging regulations and best practices in order to balance legal risk and operational efficiency.  
• The role requires collaboration across multiple time zones and the working hours require flexibility based on business needs. 

Your background:  

• Considerable professional experience with 3 to 5 years of full-time privacy and data protection experience in a multinational environment, preferably in the high-tech/IT/SaaS/software industry.  
• Law, Computer Science, Business Administration or other relevant university degree with excellent academic credentials.  
• Tech savvy with strong AI literacy and experience with privacy management software and legal research tools (such as OneTrust). 
• Extensive knowledge and ability to work with a wide variety of global privacy, security and digital marketing laws, including the US privacy and state breach notification laws, CCPA as amended by the CPRA; HIPAA, GDPR/UK GDPR, DPDPA, local data protection laws, NIS2, DORA, CRA, etc. 
• IAPP certification such as CIPP/E or CIPP/US is a plus. 
• Working knowledge of ISO 27001, 27002, 27701 and other similar frameworks. 
• Ability to communicate complex legal issues and solutions to internal clients clearly and succinctly and develop credibility at all levels of the business organization.  
• Excellent oral and written communication skills.  
• Proven analytical, time management and problem-solving skills.  
• Experience drafting and negotiating data protection, privacy and security terms.  
• Understanding of public company controls and procedures and need for risk surveillance.  

Additionally, it would be beneficial if you have:  

• Strong personal qualities, including commitment, loyalty, confidence, resilience, independence, and motivation, with the ability to accept significant responsibility.  
• Great attitude and self-starter.  
• A proven capability to excel in a fast-paced, demanding environment.  
• Ability to successfully manage competing priorities and work independently on a wide range of issues and projects, while delivering quality work under a tight time frame.  
• Independent thinking and adaptability to different project situations.  
• Strong team spirit, able to learn and share experiences with other members of the Legal team.  
• A sense of humor.  

If this sounds like you and fits your experience and career goals, we’d be happy to chat. What we offer in return is the opportunity to experience a great company culture  with wonderful colleagues to learn from and collaborate with, and also to enjoy:     

Compensation      

• Competitive remuneration package   
• Employee Stock Purchase Plan Enrolment   

Vacation, Family, and Health     

• 30 days of earned leave  
• An extra day off for your birthday  
• Various other leaves like marriage leave, casual leave, maternity leave, and paternity leave  
• Premium Group Medical Insurance for employees and five dependents, personal accident insurance coverage, and life insurance coverage  
• Professional development reimbursement    
• Interest subsidy on loans - either vehicle or personal loans.  

Apply now!