Need help hiring top legal talent? Contact our team.
Company logo

Director of Privacy

$235,000 - $264,000/ year
Posted Aug 22
Full Time
On Site
New York, New York

About TripleLift

We're TripleLift, an advertising platform on a mission to elevate digital advertising through beautiful creative, quality publishers, actionable data and smart targeting. Through over 1 trillion monthly ad transactions, we help publishers and platforms monetize their businesses. Our technology is where the world's leading brands find audiences across online video, connected television, display and native ads. Brand and enterprise customers choose us because of our innovative solutions, premium formats, and supportive experts dedicated to maximizing their performance.

As part of the Vista Equity Partners portfolio, we are NMSDC certified, qualify for diverse spending goals and are committed to economic inclusion. Find out how TripleLift raises up the programmatic ecosystem at triplelift.com.

TripleLift is seeking a highly-motivated and entrepreneurial individual to help us manage the cross-functional Privacy team. The Director of Privacy will manage and oversee an existing program and will define risk-based projects and programs to achieve compliance with new and emerging privacy regulation, with a focus on improving processes that lead to efficiencies, scalability, and reporting. In this role, you will work closely with internal partners spanning multiple functions across TripleLift to understand and assess privacy risks and opportunities and make sound recommendations and decisions under tight deadlines to help drive TripleLift’s privacy operations, governance, compliance and strategy. This role will report to the Chief Privacy Officer.

The ideal candidate is both business-minded and operationally excellent, with experience implementing regional or global privacy compliance programs and a demonstrated ability to coordinate with cross-functional teams on mission critical operational issues spanning policy, legal, privacy, product, and other interdependent teams. This person is also a creative problem-solver and is not only comfortable but thrives in a high growth environment where they will work on exciting and complex privacy issues that may even shape the internet of the future. This person is a collaborative team player comfortable making decisions. This person can get in the weeds on technology and propose practical solutions.

 

About the Team 

We are expanding the Legal and cross-functional Privacy team at TripleLift. Our mandate is to provide strategic and practical advice to all functions throughout the organization. Our responsibilities are diverse and range from drafting and negotiating contracts to evaluating product offerings to monitoring and addressing industry, legislative and regulatory developments that affect advertising and even the future of the internet. We are energized by the challenges of serving a dynamic, fast-growing company that’s shaping the future of online advertising in a complex ecosystem.

 

Responsibilities

  • Manage TripleLift’s privacy program in compliance with global regulations and advertising industry standards
  • Understand TripleLift’s technology and product at a level that enables you to provide hands on, nuanced and practical data protection advice
  • Provide a wide range of subject matter expertise and resources on privacy and security
  • Keep abreast of evolving privacy laws and industry initiatives that may affect TripleLift’s strategy, products and services at a global level
  • Work with teams worldwide on various privacy and security initiatives
  • Draft external privacy notices, policies and disclosures, and manage/update internal policies and procedures to ensure compliance with privacy laws
  • Provide interpretation, privacy guidance and practical recommendations on product requirements to engineering and product teams with respect to existing and new features, functionality, systems designs and product launches  
  • Track and manage regulatory requirements, such as data protection impact assessments, records of processing activities, data subject responses, etc., to comply with new, existing and changing privacy laws and evaluate registration obligations for new market entry
  • Work hands-on with business and technology teams to support the implementation of privacy risk management and compliance
  • Facilitate discussion and coordination among product managers and privacy stakeholders across the company (including members of the legal, public policy, product marketing, security, and communications teams)
  • Work with product managers and other privacy and compliance stakeholders to develop and drive consensus around creative solutions to privacy-by-design and compliance challenges
  • Communicate privacy, security and compliance decisions to the broader cross-functional team, and ensure that those decisions are properly implemented and maintained
  • Analyze how we evaluate the impact, and monitor the performance and effectiveness of our privacy program, and undertake other projects to implement privacy-related frameworks and optimize operations
  • Provide privacy policy and privacy risk program expertise to analyze trends and identify systemic issues, includes developing privacy risk mitigation strategies with direction from Chief Privacy Officer and Privacy Product Managers
  • Drive analyses to determine risk profiles and share data with the Chief Privacy Officer and Privacy Product Managers to influence decision-making
  • Manage and coordinate internal and customer-facing documentation on the business’ privacy practices and internal, customer and user-facing controls
  • Act as the central point of contact for the Privacy Team in order to coordinate audit and support responses to regulators, customers and partners
  • Translate Privacy Risk Assessment results into operations and product initiatives
  • Assist with enterprise training and develop internal guidance as well as tailored training and awareness materials to be delivered to various business functions
  • Prepare presentations related to privacy compliance for delivery to internal and external audiences
  • Assist with vendor review program to ensure compliance with the company’s privacy policies, procedures and program requirements

 

Qualifications 

  • 8+ years of experience at a top-tier law firm, in-house legal department, consulting firm or in-house privacy team
  • Deep experience with global privacy regulations, including, among others the GDPR, the ePrivacy Directive as well as a strong familiarity with U.S. privacy laws and self-regulatory programs
  • Prior start-up or tech experience is required. Ideally in adtech
  • An entrepreneurial spirit and passion for working in a high-growth environment
  • Ability to understand technology and understand the interplay between legal, policy and strategy
  • Excellent business judgment and ability to assess legal risk while also thinking strategically and providing practical advice
  • Strong work ethic and ability to understand and manage shifting priorities and multiple projects
  • Exceptional communication, analytical and drafting skills
  • Ability and desire to work both autonomously but also collaboratively as part of a growing team
  • Strong organizational, project-management and operational skills
  • Exceptional judgment and integrity, ability to handle multiple matters independently on tight timeframes, adept at making smart decisions in the face of ambiguity and imperfect information
  • Attention to detail and an ability to view privacy issues within the context of business objectives, effectively coordinating and maintaining strong relationships with cross-functional partners
  • Ability to follow through and work on numerous projects simultaneously under deadline pressure
  • Comfort owning and improving upon processes to achieve efficiencies and optimal outcomes
  • Used to working in a fast-paced environment, handling novel issues and providing timely practical advice designed to enable the business to achieve its goals whilst managing risk
  • Practical experience driving change across compliance and privacy within a technology firm
  • Strong written and verbal communication skills with the ability to present to leadership
  • Hold one or more privacy certifications (e.g., CIPT, CIPP, CIPM)

 

More About You 

  • You are passionate about a culture of learning and growing. You love challenging yourself to constantly learn and improve, and sharing your knowledge to empower others
  • You believe in providing the best service to customers which includes empowering them by collaborating on efficient processes and providing knowledge and tools 
  • You embrace uncertainty and thrive on driving change. You enjoy challenging the status quo and working in an industry where technology changes daily and providing legal advice requires a deep understanding of the interplay between technology, policy, strategy and business interests.
  • You will have a broad legal or privacy background, significant experience of working in an in-house team and some people management (and ideally leadership) experience.
  • You like to take risks when looking for novel solutions to complex problems. If faced with roadblocks, you continue to take initiative to reach the best solution 

 

US Jobs: The base salary range represents the low and high end of the TripleLift US salary range for this position. Actual salaries will vary depending on factors including but not limited to experience and performance. The range listed is just one component of TripleLift’s total compensation package for employees. Other rewards may include bonuses, an open Paid Time Off policy, and many region-specific benefits.

Pay is based on various non-discriminatory factors including but not limited to experience, education, and skills.

Benefits Available to Eligible Employees Include the following*:
  • Medical, Dental & Vision Plans
  • Unlimited PTO
  • 401k w/ employer match

*Full-time employees are eligible for comprehensive benefits (subject to the terms of applicable plans/policies/agreements, which will be made available to you after commencing employment).

Salary range transparency
$235,000$264,000 USD

 

Life at TripleLift

At TripleLift, we’re a team of great people who like who they work with and want to make everyone around them better. This means being positive, collaborative, and compassionate. We hustle harder than the competition and are continuously innovating.

Learn more about TripleLift and our culture by visiting our LinkedIn Life page.

 

Diversity, Equity, Inclusion and Accessibility at TripleLift 

At TripleLift, we believe in the power of diversity, equity, inclusion and accessibility. Our culture enables individuals to share their uniqueness and contribute as part of a team. With our DE&I initiatives, TripleLift is a place that works for you, and where you can feel a sense of belonging and support. At TripleLift, we will consider and champion all qualified applicants for employment without regard to race, creed, color, religion, national origin, sex, age, disability, sexual orientation, gender identity, gender expression, genetic predisposition, veteran, marital, or any other status protected by law. TripleLift is proud to be an equal opportunity employer.

Learn more about our DEI efforts at https://triplelift.com/diversity-equity-and-inclusion/

Privacy Policy

Please see our Privacy Policies on our TripleLift and 1plusX websites.

TripleLift does not accept unsolicited resumes from any type of recruitment search firm. Any resume submitted in the absence of a signed agreement will become the property of TripleLift and no fee shall be due.