We believe in a world where growth thrives across borders and cultures. As an EOR, Atlas employs people to work for companies anywhere in the world. Before we came along, the only businesses offering a similar solution were essentially brokers. They’d outsource your HR and payroll services to third-party providers in different countries. Today, we’re the only 100% Direct EOR in the world, partnering with clients to get to market 82% faster, at a reduced cost, and with lower risk through local expertise in over 160 countries.
Atlas technology powers the idea that companies can employ whoever they want, wherever they are in the world. Through our cloud-based platform, we deliver the Human Resources infrastructure that underpins international growth, leaving companies free to focus on the strategy that makes it happen. We partner with our clients through their international life cycle from the first dip in the global pool until the moment it’s time to set up their own entities and run payroll. Atlas is here from point A to point Z.
The future of work is borderless, and so are we. So, it helps that our people are located around the globe — in the US, UK, India, China and beyond — and speak 90+ languages. Diversity and inclusion are at our core.
Atlas invests in Environment, Social and Governance initiatives through our impact program. Impact is central to our vision as a business and at the heart of our culture. Through impact we are addressing our environmental impact for society, for the planet and for our long-term success. Employee wellness, diversity and charitable activities are at the core of our social responsibility. Impact ensures Corporate Governance operates ethically and responsibly while preserving our customers and employees’ trust.
Job Summary
As the Senior Manager of Privacy & Data Protection, reporting to the Director of Risk & Compliance, you will be leading and overseeing Atlas’ privacy program, ensuring compliance with global data protection regulations, and protecting the privacy rights of customers, employees, and stakeholders. As a key member of the Risk & Compliance team, you will be developing and implementing privacy policies, managing data privacy risks, and providing strategic advice on privacy-related matters. You will work and partner with various departments, including Legal, IT, HR, Operations, Entity Compliance and other business areas globally across the firm, to ensure that all business practices align with the highest standards of privacy and data protection.
Key Responsibilities
Privacy Program Management
- Develop, implement, and manage the organization’s privacy program, including policies, procedures, and training programs, to ensure compliance with applicable data protection laws (e.g., GDPR, CCPA, HIPAA).
- Lead the creation and maintenance of privacy frameworks, ensuring they are aligned with industry best practices and regulatory requirements.
- Oversee privacy risk assessments, including Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs), and ensure that identified risks are mitigated.
Compliance & Regulatory Oversight
- Monitor and analyze privacy laws, regulations, and industry standards, ensuring the organization's privacy program remains up-to-date and compliant with current legal requirements.
- Coordinate and manage responses to regulatory inquiries, audits, and investigations related to data privacy.
- Ensure that privacy notices, consent forms, and other related documents are accurate, transparent, and compliant with relevant laws.
Data Subject Rights Management
- Oversee the management of data subject requests, including requests for access, correction, deletion, and portability of personal data.
- Develop processes and procedures to ensure that data subject rights are respected and managed in a timely and compliant manner.
Incident Response & Data Breach Management
- Lead the organization’s response to data breaches, including investigation, containment, notification, and remediation efforts.
- Collaborate with the IT and security teams to ensure that data incidents are handled effectively and reported to relevant authorities when required.
Training & Awareness
- Design and deliver privacy training programs for employees and contractors to ensure awareness and understanding of privacy obligations.
- Develop and implement privacy awareness initiatives to foster a culture of data protection and privacy within the organization.
Stakeholder Engagement
- Act as a key point of contact for privacy-related inquiries from internal and external stakeholders, including customers, partners, and regulators.
- Collaborate with cross-functional teams to integrate privacy by design and by default into all business processes, systems, and products.
- Provide strategic guidance to senior management on privacy risks, trends, and best practices.
Qualifications
Education
- Bachelor’s degree in Law, Information Security, Business Administration, or a related field. A Master’s degree or Juris Doctor (JD) is preferred.
Experience
- Minimum of 7-10 years of experience in privacy, data protection, or a related field, with at least 3 years in a senior or managerial role.
- In-depth knowledge of global privacy laws and regulations, including GDPR, CCPA, and HIPAA.
- Proven experience in developing and managing comprehensive privacy programs within a corporate environment.
Certifications
- Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), or similar certifications are highly desirable.
Skills
- Strong understanding of privacy principles, data protection laws, and regulatory requirements.
- Excellent project management and organizational skills, with the ability to manage multiple priorities in a fast-paced environment.
- Strong analytical and problem-solving skills, with the ability to think strategically and address complex privacy issues.
- Exceptional communication and interpersonal skills, with the ability to influence and collaborate with stakeholders at all levels of the organization.
- Proficiency in privacy management software, data protection tools, and Microsoft Office Suite.
What We Offer
- The opportunity to work with a purpose — simplifying global expansion while supporting sustainable communities around the world
- A diverse and inclusive environment, with over 40 nationalities represented, 90+ languages spoken, and a workforce made up of 52% women
- Flexible PTO and birthdays off
- Generous Parental Leave Program
- Growth and development opportunities with access to Coursera – a leading learning and certification provider
- The opportunity to challenge yourself in a high-performing organization and leave each day knowing you have made an impact.
This position description may not describe all duties, responsibilities, and skills associated with this position. It is intended to portray the major aspects of the job. Other duties or skills may be required.
Atlas Technology Solutions, Inc. is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: Atlas is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Atlas are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Atlas will not tolerate discrimination or harassment based on any of these characteristics. Atlas encourages applicants of all ages.
This role will be subject to a background check under local law after an employment offer has been made. Employment may be subject to results. In addition, references may be requested at the final stage of the process.
