Data Privacy Director

Flywire is seeking a Director, Data Privacy to join our Legal team and lead the next phase of our privacy program. This is a high visibility role with significant scope for ownership and autonomy, reporting directly to the Deputy General Counsel. Flywire processes Personally Identifiable Information (PII) and Personal Health Information (PHI) of individuals around the world, including financial information, medical records, national IDs, birthdates and contact information. This role sits at the most senior level of the privacy function day to day and will act as the primary face of privacy for enterprise clients, internal stakeholders and senior leadership. It requires minimal handholding and involves taking ownership of the program, working out obstacles independently, and structuring a function that currently has room to grow.

Responsibilities

• Take ownership of the existing privacy program, assess current state and drive improvements to processes and structure.
• Act as the senior privacy representative on calls with enterprise clients, including their privacy and security leadership.
• Ensure compliance with global, national and local privacy laws and regulations including but not limited to GDPR, CCPA, PIPEDA, PIPL, etc.
• Design and implement operational processes for the various business units in accordance with applicable privacy laws and regulations.
• Lead the records of processing activities (RoPA) program and oversee its ongoing maintenance.
• Drive the strategic requirements for the development and enhancement of privacy program technology solutions.
• Conduct privacy regulatory horizon scanning to proactively evaluate emerging threats, trends and new regulations.
• Manage and maintain data protection agreements, privacy impact assessments and sub-processor records.
• Monitor and ensure appropriate handling of incoming privacy requests and complaints from data subjects.

Qualifications

• Bachelor's degree in a relevant field (or equivalent experience).
• Minimum of 8 years of related professional experience at a senior level, with prior experience designing or running a privacy program rather than solely operating within one.
• Experience in a global enterprise or fintech environment is preferred though not required.
• Strong understanding of data privacy laws with the ability to integrate these into practical business operations.
• One or more of the following professional certifications: CIPP, CIPT or CIPM.
• Excellent communication skills with the confidence and gravitas to engage senior external stakeholders including enterprise clients and their privacy leadership.
• Comfortable operating with a degree of ambiguity and building structure where it does not yet exist.
• Strong client service orientation and experience representing an organisation externally on complex regulatory matters.

This is a hybrid role based in our London office.

Benefits

• Employee Stock Purchase Plan (ESPP).
• Dynamic & Global Team with virtual collaboration experience.
• Wellbeing Programs (Mental Health, Wellness, Yoga/Pilates/HIIT Classes) with Global FlyMates.
• Meaningful impact on company success.
• Competitive time off including FlyBetter Days for volunteering and Digital Disconnect Days.
• Great Talent & Development Programs (Managers Taking Flight – for new or aspiring managers).

Flywire is an equal opportunity employer. With over 30 nationalities across 12 different offices, diversity and inclusion are core to our people agenda.