Senior Manager Privacy

We believe in a world where growth thrives across borders and cultures. As an EOR, Atlas employs people to work for companies anywhere in the world. Before we came along, the only businesses offering a similar solution were essentially brokers. They'd outsource your HR and payroll services to third-party providers in different countries. Today, we're the only 100% Direct EOR in the world, partnering with clients to get to market 82% faster, at a reduced cost, and with lower risk through local expertise in over 160 countries.

Atlas technology powers the idea that companies can employ whoever they want, wherever they are in the world. Through our cloud-based platform, we deliver the Human Resources infrastructure that underpins international growth, leaving companies free to focus on the strategy that makes it happen. We partner with our clients through their international life cycle from the first dip in the global pool until the moment it's time to set up their own entities and run payroll. Atlas is here from point A to point Z.

The future of work is borderless, and so are we. So, it helps that our people are located around the globe — in the US, UK, India, China and beyond — and speak 90+ languages. Diversity and inclusion are at our core.

Atlas invests in Environment, Social and Governance initiatives through our impact program. Impact is central to our vision as a business and at the heart of our culture. Through impact we are addressing our environmental impact for society, for the planet and for our long-term success. Employee wellness, diversity and charitable activities are at the core of our social responsibility. Impact ensures Corporate Governance operates ethically and responsibly while preserving our customers and employees' trust.

**Job Summary**

As the Senior Manager of Privacy & Data Protection, reporting to the Director of Risk & Compliance, you will be leading and overseeing Atlas' privacy program, ensuring compliance with global data protection regulations, and protecting the privacy rights of customers, employees, and stakeholders. As a key member of the Risk & Compliance team, you will be developing and implementing privacy policies, managing data privacy risks, and providing strategic advice on privacy-related matters. You will work and partner with various departments, including Legal, IT, HR, Operations, Entity Compliance and other business areas globally across the firm, to ensure that all business practices align with the highest standards of privacy and data protection.

**Key Responsibilities**

**Privacy Program Management**
- Develop, implement, and manage the organization's privacy program, including policies, procedures, and training programs, to ensure compliance with applicable data protection laws (e.g., GDPR, CCPA, HIPAA).
- Lead the creation and maintenance of privacy frameworks, ensuring they are aligned with industry best practices and regulatory requirements.
- Oversee privacy risk assessments, including Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs), and ensure that identified risks are mitigated.

**Compliance & Regulatory Oversight**
- Monitor and analyze privacy laws, regulations, and industry standards, ensuring the organization's privacy program remains up-to-date and compliant with current legal requirements.
- Coordinate and manage responses to regulatory inquiries, audits, and investigations related to data privacy.
- Ensure that privacy notices, consent forms, and other related documents are accurate, transparent, and compliant with relevant laws.

**Data Subject Rights Management**

**Incident Response & Data Breach Management**
- Lead the organization's response to data breaches, including investigation, containment, notification, and remediation efforts.
- Collaborate with the IT and security teams to ensure that data incidents are handled effectively and reported to relevant authorities when required.

**Training & Awareness**
- Design and deliver privacy training programs for employees and contractors to ensure awareness and understanding of privacy obligations.
- Develop and implement privacy awareness initiatives to foster a culture of data protection and privacy within the organization.

**Stakeholder Engagement**
- Act as a key point of contact for privacy-related inquiries from internal and external stakeholders, including customers, partners, and regulators.
- Collaborate with cross-functional teams to integrate privacy by design and by default into all business processes, systems, and products.
- Provide strategic guidance to senior management on privacy risks, trends, and best practices.

**Qualifications**

**Education**
- Bachelor's degree in Law, Information Security, Business Administration, or a related field. A Master's degree or Juris Doctor (JD) is preferred.

**Experience**
- Minimum of 7-10 years of experience in privacy, data protection, or a related field, with at least 3 years in a senior or