Senior Director, Global Privacy Compliance

Around the globe, families, clients and staff trust Bright Horizons to provide high-quality education and care, operate with integrity, and empower them to thrive. Respecting privacy rights is an integral part of building and maintaining that trust. How we process and protect personal information as a business is critical to supporting Bright Horizons’ reputation and success.

The purpose of Bright Horizons’ Privacy Team is to ensure that Bright Horizons handles personal data responsibly and in compliance with relevant privacy laws and regulations. The Privacy Team’s goals are to protect personal data, build trust, reduce risks and enhance business practices. We strive for continuous improvement and the advancement of Bright Horizons’ privacy maturity levels.

The Senior Director, Global Privacy Compliance is responsible for developing, implementing, and overseeing the organization's global privacy compliance program. This role will work closely in partnership with the Senior Director, Global Privacy Counsel, to ensures that the global privacy compliance program complies with all relevant privacy laws and regulations.

This Hybrid role requires in-person work at our Newton, MA headquarters.

Bright Horizons is trusted by families and employers around the world for high-quality child care and early education, back-up care, and workplace education. We partner with some of the world’s best companies to provide services that help employees perform their best and support families to thrive both personally and professionally.

Responsibilities

• Privacy Program

  • Build and manage a comprehensive global privacy compliance program (including governance, risk assessment, policy development and training) that adheres to all relevant privacy laws and promotes continual improvement.

  • Drive individual and departmental accountability for complying with the global privacy compliance program within the organization.

• Privacy Management Tool (One Trust)

  • Business owner and manager of the privacy management tool.

  • Keep up to date on software releases.

  • Utilizing the privacy management tool to ensure optimization of documentation of and reporting on the global privacy compliance program.

  • Implement and manage business continuity plan for the privacy management tool.

  • Govern internal team changes/updates to the privacy management tool that ensure awareness/training of any approved changes.

  • Govern data entry into the privacy management tool that ensures consistent practices and outputs.

• Privacy by Design

  • Advise the organization on the implementation of privacy by design solutions across technologies and processing activities that supports privacy compliance throughout entire lifecycles of applications, systems and personal data.

  • Work closely with Global Privacy Counsel, Legal, IT, Information Security, HR, Internal Audit and other departments to integrate privacy considerations into business processes.

• Policies, Procedures, Guidelines and other Documentation

  • Create and maintain comprehensive privacy policies, procedures and other required documentation that ensures compliance with global privacy compliance program, privacy laws and company privacy related certifications (such as ISO and SOC2).

  • Develop and implement a document management system for all privacy documentation.

• Assessments, Tracking Technologies and Risk Management

  • Oversee and manage:

    • the execution of privacy assessments required under the global privacy compliance program (such as asset assessments, records of processing activities, privacy impact assessments).

    • the organization's use of cookies and other tracking technologies complies with relevant privacy laws and regulations, including developing, implementing, and managing policies and procedures related to tracking technologies, conducting audits, and providing guidance to various departments to ensure compliance.

    • the identification, assessment, and mitigation of privacy risks within the organization, including the development and implementation of risk management strategies.

• Monitoring and Reporting:

  • Monitor privacy compliance and report on the status of the global privacy compliance program.

  • Manage privacy related audits and certification requirements for the organiza