Privacy Director

Company Overview

Veracross provides SaaS-based School Information Systems (SIS) designed to meet the specific needs of independent K-12 schools worldwide. Our one-record solution combines the power of a fully integrated single-record database, personalized communication tools, and an elegant architecture that is unique in our industry.

We are a growing, values-led community of employees in the US, UK and Australia who share a vision to unify school communities, improve the quality of education, and enhance learning.

• Veracross is five product brands in one global tech company
• Veracross SIS is a one-person, one-record school management platform
• Magnus Health provides cloud-based Student Health Record (SHR) solutions

Digistorm connects with their communities through Digistorm Websites, Digistorm Funnel, and Digistorm Apps.

Epraise incentivizes student well-being and connects teachers, students, and families.

Firefly provides an online learning space for students and teachers

Job Description

As the Privacy Director, you will be responsible for overseeing and managing Veracross' data protection and privacy program. You will work closely with cross-functional teams, including IT, and business operations, to ensure compliance with privacy laws and regulations, develop and maintain privacy policies and procedures, and educate employees on data privacy best practices.

You will be responsible for conducting privacy impact assessments, managing data privacy incidents, and responding to data subject requests. You will also serve as the primary point of contact for regulatory authorities and individuals regarding privacy-related matters. This position reports to the CISO.

Responsibilities

• Develop and maintain Veracross' data protection and privacy program.
• Ensure compliance with relevant global privacy laws and regulations, including GDPR and CCPA.
• Create and update privacy policies, procedures, and guidelines.
• Conduct privacy impact assessments and monitor ongoing compliance.
• Manage and respond to data privacy incidents and data subject requests.
• Educate employees on data privacy best practices and raise awareness throughout the organization.
• Collaborate with cross-functional teams to implement privacy by design principles.
• Serve as the primary point of contact for regulatory authorities and individuals regarding privacy-related matters.
• Stay up to date with emerging global privacy trends, laws, and regulations.

Requirements

• Strong knowledge of global privacy laws and regulations, including GDPR and CCPA.
• Experience developing and managing data protection and privacy programs in SaaS business environment
• Knowledge of data privacy impact assessments and incident response processes.
• Excellent communication and presentation skills.
• Ability to collaborate effectively with cross-functional teams.
• Attention to detail and strong analytical skills.
• Privacy certification such as CIPP/E or CIPP/US is preferred.
• Eligibility to work in the US.
• Key Job Requirements
• 3 – 6 years of relevant global privacy experience in SaaS and/or educational setting
• 3 - 6 years of experience in privacy, legal, cybersecurity, compliance or related fields
• Deep understanding of global privacy laws/regulations to include GDPR, CCPA, PIPEDA, data protection frameworks and privacy industry best practices
• Familiarity with relevant student privacy laws including but not limited to FERPA, COPPA, PPRA
• Experience building a privacy program, supporting and/or administering one
• Experience conducting privacy impact assessments, privacy evaluation techniques and compliance
• Experience developing, delivering and overseeing privacy training and awareness activities
• Proven experience executing data and privacy program controls
• Exposure to AI governance, digital marketing privacy or emerging technology regulations
• Privacy certifications CIPP/E or CIPP/US preferred