Support oversight of the existing Privacy compliance program across jurisdictions, with primary focus on U.S. requirements and alignment to global privacy obligations.
Translate Legal guidance and regulatory requirements into policies, standards, and control expectations for first-line teams.
Provide independent oversight and effective challenge of first-line privacy control environments, including review of control design and identification of gaps.
Provide support on regulatory compliance requirements and conduct gap assessments of business unit procedures against global policies.
Collaborate with Legal, Information Security, and business teams to manage compliance risks and support regulatory exams.
Maintain an understanding of business processes, products, and services while participating in exams as a subject matter expert.
Experian is a global data and technology company operating across financial services, healthcare, automotive, and more. With 25,200 employees across 32 countries, they have an award-winning, inclusive, and purpose-driven culture.
Advise Servicing, Collections, and Repayments teams on FCRA, FDCPA, and other regulatory compliance requirements.
Develop and update compliance policies, manage issues, and implement corrective action plans.
Monitor compliance metrics, prepare reports for senior management, and deliver training programs.
Affirm is reinventing credit to make it more honest and friendly, offering buy now, pay later products without hidden fees. We are a remote-first company with a collaborative culture, committed to providing inclusive benefits and competitive compensation.
Serve as a subject matter expert on Canadian consumer protection and payment regulations, providing advisory support to Product, Legal, Risk, and Operations teams.
Oversee Canadian regulatory reporting, lead compliance risk assessments, and evaluate control effectiveness to ensure program alignment.
Maintain and enhance Canada-specific policies, procedures, and control documentation while partnering cross-functionally on remediation efforts.
Affirm is reinventing credit to make it more honest and friendly, offering consumers the flexibility to buy now and pay later without hidden fees or compounding interest. We are a global fintech company with a remote-first culture, dedicated to delivering honest financial products.
Manage and enhance the enterprise privacy program and day-to-day privacy operations across FUJIFILM Holdings America Corporation and its subsidiaries.
Act as a key subject matter expert on data privacy laws including U.S. state, Canadian, HIPAA, and marketing privacy regulations.
Collaborate with cross-functional teams to integrate privacy by design, support incident response, and develop privacy training initiatives.
FUJIFILM Holdings America Corporation is redefining innovation across healthcare, photography, semiconductors, and data storage with 23 affiliate businesses in the Americas. Headquartered in Valhalla, New York, and part of Fujifilm's global group of over 70,000 employees, the company fosters a dynamic, mission-driven culture focused on giving the world more smiles.
Partner with product and marketing teams to ensure compliance with consumer protection regulations in developing, launching, and enhancing deposit, payment, and lending products.
Lead evaluation and interpretation of compliance requirements for new and existing products, ensuring alignment with regulatory expectations.
Monitor and analyze evolving regulatory requirements, assessing their impact on products and driving updates to policies and controls.
EarnIn is a pioneer in earned wage access, building products that deliver real-time financial flexibility for those living paycheck to paycheck. The company has a healthy core business, world-class funding partners, and an experienced leadership team.
Lead development and maintenance of Mozilla's core privacy compliance infrastructure, including data mapping and records of processing activities.
Independently drive complex cross-functional privacy initiatives and operationalize scalable governance processes with minimal oversight.
Evaluate and advise on evolving U.S., European, and international privacy and AI regulatory developments relevant to enterprise operations and internal data governance.
Mozilla Corporation is a non-profit-backed technology company that has shaped the internet for over 25 years, making brands like Firefox. With over 225 million monthly users and owned by the Mozilla Foundation, we are not beholden to shareholders and focus on making the internet better for people through open-source software.
Conduct hands-on compliance audits of digital platforms against global privacy regulations such as GDPR, CCPA, and COPPA.
Design and execute independent audit methodologies to test user protections, content moderation, and data handling practices.
Present detailed findings and strategic recommendations to clients and their leadership through executive briefings.
Coalfire solves clients' hardest cybersecurity challenges through advisory, assessment, and automation. They are a team of passionate problem-solvers with offices across the US and UK.
Own and manage the compliance program including SOC 2 and ISO 27001 readiness and audits.
Lead risk assessments, control testing, and enterprise risk management processes.
Partner with Engineering, Security, Product, Legal, HR, and Operations to embed compliance into business processes.
Calendly is a scheduling platform used by millions to automate meetings and streamline time management. They are a rapidly growing SaaS company fostering a culture of learning and high performance.
Manage a team of compliance professionals or third-party providers to ensure proper Compliance program execution and performance management.
Provide compliance advisory services and guidance for regulatory change, product change, and business-as-usual operations across multiple domains.
Recruit, hire, and develop employees while ensuring adherence to consistent standards for communication, documentation, and reporting.
Fulton Bank is a financial institution committed to making a positive impact in local communities and championing a culture of continuous learning and inclusion. The company promotes a digitally enabled work environment and values employee well-being.
Execute Risk & Compliance initiatives, manage privacy and security projects, and ensure alignment with organizational goals.
Identify and mitigate operational, IT, and data privacy risks by partnering with cross-functional teams.
Build and improve compliance frameworks, policies, and procedures aligned with regulations like PIPEDA, COPPA, and GDPR.
BIS Safety Software is a SaaS company that helps organizations manage safety, learning, and compliance through innovative software solutions. Founded in 2006, the company is headquartered in Sherwood Park, Alberta, and offers an Employee Stock Ownership Plan (ESOP) with a culture emphasizing humility and contribution over hierarchy.
Serve as a primary compliance resource embedded in the Alma-to-Spring Health integration, mapping control environments and building a unified compliance organization.
Own and lead enterprise-level compliance programs including SOC 2 Type II, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and ITGC-SOX.
Develop and operationalize Spring Health's AI governance program, including policies, risk frameworks, and AI-specific compliance documentation.
Spring Health is a global mental health company on a mission to eliminate every barrier to mental health. With outcomes independently validated by JAMA Network Open, Spring Health reaches more than 170 million people worldwide through leading employers, health plans, and partners.
Lead a team of regulatory professionals to monitor and operationalize federal and state healthcare regulations for HealthEdge Source™.
Oversee workload distribution, delivery, and escalation management to ensure compliance with complex regulatory landscapes.
Partner cross-functionally with Product, Engineering, and Client Success to integrate regulatory requirements into product development.
HealthEdge is a healthcare technology company that provides reference data and pricing transparency platforms. The company is a full-time, permanent employer with a remote workforce, committed to diversity and offering a collaborative culture.
Serve as the primary legal advisor to the executive team and oversee all legal matters including regulatory and competition proceedings.
Manage and develop the legal team while personally owning significant commercial agreements and product launches.
Direct global privacy compliance and advise on employment, IP, and corporate governance matters.
DuckDuckGo is an online protection company on a mission to raise the standard of trust online. The remote-first team of 300+ has been profitable since 2014, with annual revenue over $100M.
Advise on AI governance, privacy, and security law as the legal lead for Proof's privacy and AI framework.
Partner with product, engineering, and go-to-market teams to operationalize privacy across identity data, biometrics, and notarizations.
Manage breach response, vendor security, and regulatory inquiries with a business-minded approach.
Proof is the world's first identity-assured transaction management platform, digitizing trust for critical transactions. Developed by the same team behind Notariz℠, it has executed first digital real estate closings, mortgages, and auto sales, with a focus on security and compliance.
Provide expert guidance on privacy, AI governance, and data protection compliance across global initiatives.
Conduct privacy risk assessments and oversee cross-border data transfer mechanisms.
Advise on privacy-by-design principles and maintain privacy documentation including DPIAs and RoPAs.
Our partner is a fast-moving organization operating in a complex global data environment, focused on scalable cloud infrastructure and AI-driven solutions. They have an international, highly skilled work environment with a strong focus on learning and development.
Lead delivery of DPIAs, ROPA build-outs, and privacy program gap assessments for global clients.
Serve as internal authority on evolving privacy regulations including GDPR, India's DPDP Act, and EU AI Act.
Build reusable IP such as DPIA templates, AI governance frameworks, and compliance playbooks.
Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers. Backed by top-tier investors like Accel and Elevation, it is trusted by over 3,000 organizations and fosters a culture of ownership and collaboration.