Data Protection Advisor - Remote

The Data Privacy Manager is responsible for managing, co-ordinating and generally implementing KLDiscovery's data protection strategy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018 and US State privacy laws including the California Consumer Privacy Act (CCPA) and Health Insurance Portability and Accountability Act (HIPAA). The Privacy Manager will act as the internal lead for KLDiscovery on data privacy queries, serves as the primary point of contact for data subjects and regulatory authorities, provides expert advice on data protection matters, undertakes implementation of data privacy initiatives, ensures compliance with KLDiscovery policies and supports KLDiscovery in managing risks associated with the processing of personal data for clients and employees.

Key Responsibilities

• Monitor compliance against global data protection laws and internal policies, procedures, and controls, both for clients and employees.
• Advise KLDiscovery and its employees on data protection obligations and best practices.
• Monitor emerging trends, legislative changes, and guidance relating to data privacy, particularly involving use of artificial intelligence.
• Conduct regular audits, risk assessments, and reviews of data processing activities including vendor due diligence as it relates to Data Privacy Assessments.
• Co-ordinate and manage Data Protection Impact Assessments (DPIAs), Transfer Impact Assessments (TIAs), Legitimate Interest Assessments (LIAs) and advise on mitigating risks for both product and internal initiatives.
• Maintain KLDiscovery's compliance with cross‐border data transfer requirements, including the Data Privacy Framework (DPF), Schrems II obligations, and any successor or equivalent transfer mechanisms.
• Own and maintain the Records of Processing Activities (ROPA) as required by law on a per country basis, covering all business units.
• Develop and maintain data protection policies, privacy notices, and supporting documentation.
• Serve as the primary contact for data subjects regarding data protection queries, complaints, and requests, including Subject Access Requests (SARs), with responses managed within applicable statutory timeframes and data deletion.
• Act as the primary liaison with supervisory authorities and facilitate communication in the event of a data breach or investigation.
• Support the cybersecurity incident response process by providing expert guidance on breach classification, notification obligations, and regulatory reporting requirements across applicable jurisdictions including GDPR, HIPAA, DORA, NIS2, and US state laws.
• Deliver KLDiscovery's data protection training and awareness programme.
• Monitor changes in privacy laws and advising the organization accordingly.
• Answer data privacy questions from clients as part of client RFPs and due diligence process and questionnaires.
• Support KLD's AI governance framework and EU AI Act compliance readiness, including reviewing AI-driven data processing activities for privacy risk and control adequacy.

A degree in law, information security, IT, compliance, or a related field. Professional certification in data protection or privacy (e.g., Expert knowledge of GDPR, UK Data Protection Act 2018, US State privacy laws as well as HIPAA and other relevant legislation. An AI Act or AI governance certification (e.g., Experience conducting security and privacy audits, risk assessments, records of processing activities, DPIAs and managing data protection projects.

The Privacy Manager reports directly to the General Counsel and works closely with IT, Cybersecurity, Legal, Marketing, Product and People & Culture Teams and has access to the highest levels of decision-making within the organisation.

This position is remote. Competitive salary commensurate with experience, plus benefits package.

We bring clarity, trust, and meaning to data for clients navigating legal matters worldwide. We embrace curiosity, question assumptions, and raise the bar constantly. We do not discriminate on the basis of race, color, creed, religion, national origin, ancestry, sex, gender identity, gender expression, sexual orientation, marital or family status, pregnancy, age, veteran status, disability, genetic information, or any other characteristic protected by applicable law. This commitment applies to all aspects of employment, including recruitment, hiring, compensation, promotion, training, discipline, and termination. We believe that when our employees feel supported, valued, and empowered, they can thrive both personally and professionally. That's why we're committed to fostering a collaborative, inclusive workplace where you can grow your career, make meaningful contributions, and enjoy a healthy work-life balance.

Depending on your location, these may include comprehensive health and wellness benefits, retirement and financial programs, paid time off and leave options, employee assistance resources, and professional development opportunities. We also embrace flexibility, offering remote work opportunities for most employees to support work-life balance while keeping our teams connected and collaborative. Certain roles may require an office-based or hybrid schedule based on business and operational needs.