Privacy Counsel, Data Protection Officer

Mecka

. Own the privacy programme across every market and capture model .

Posted 11/1/2026full-timeToronto • CanadaMid-LevelSenior💰 $150,000 - $180,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in privacy and data protection management, including compliance with laws, data protection impact assessments, and cross-border transfer mechanisms. Proven ability to communicate effectively with senior management and regulators while translating complex privacy requirements into actionable controls.

Highest-signal resume keywords

Privacy Programme ManagementData Protection Impact AssessmentsCross-Border Transfer MechanismsRegulatory CompliancePrivacy Certification (CIPP/E, CIPP/A, CIPM)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data ProtectionPrivacy LawConsent ManagementData Breach ResponseRegulator RegistrationImpact AssessmentsData MinimizationOperational PoliciesData Subject RequestsIncident Management

Soft Skills

CommunicationAdvisory SkillsIndependenceCollaborationProblem-Solving

Certifications & Qualifications

CIPP/ECIPP/ACIPM

Industry Keywords

Privacy ProgrammeData Protection RegimesHigh-Growth TechnologyMarketplaceAIData CompanyEmerging MarketsSOC 2 ComplianceMulti-JurisdictionalData Protection Authorities

About the role

Key responsibilities & impact

Own the privacy programme across every market and capture model
Maintain and build the privacy and data protection programme, including records of processing, impact assessments, retention schedules, and operational policies
Develop and deliver privacy training for employees, contractors, partners, and other stakeholders
Independently advise the company and personnel on data protection requirements
Monitor compliance with applicable laws and internal policies
Advise on data protection impact assessments and report material privacy risk
Serve as point of contact for data subjects and supervisory authorities and cooperate with regulators
Own consent and transparency frameworks, approved consent forms, privacy notices, disclosures, and related records
Implement and monitor cross-border transfer mechanisms
Manage regulator registrations, local data protection representative appointments, and local filings
Partner with engineering, product, security, and quality teams on redaction, encryption, access controls, data minimization, and deletion
Review new capture models, datasets, and customer deliveries before launch
Advise operations teams on privacy conditions required before a market opens
Lead responses to data incidents, data subject requests, complaints, and regulator inquiries
Assess notification and remediation obligations
Manage outside privacy counsel against clear scopes and budgets

Requirements

What you’ll need

Law degree and admission to practice in at least one jurisdiction
5 to 8+ years of privacy and data protection practice
Experience at a top tier law firm and in-house at a high-growth technology, marketplace, AI, or data company
Ability to perform the DPO function independently and objectively
Ability to communicate directly with senior management and regulators
Hands-on experience advising on data protection regimes in several countries at once
Experience with consent, cross-border transfers, data protection impact assessments, data breach response, and regulator registration
Experience managing outside counsel across multiple countries
Ability to translate complex privacy requirements into practical controls for engineering, operations, and delivery teams
Privacy certification such as CIPP/E, CIPP/A, or CIPM is advantageous
Experience with video, image, biometric, or location data, or datasets collected or processed for machine learning training is advantageous
In-house experience at a marketplace, delivery, AI, data, or gig platform operating across emerging markets is advantageous
SOC 2 compliance or audit-readiness initiatives is an asset
Experience communicating with data protection authorities, responding to regulatory inquiries, and managing multi-jurisdictional personal data incidents is advantageous

Benefits

Comp & perks

Equity
Health and wellness benefits
Other company programs
Inclusive work environment
Recruitment accommodations