Director, Privacy (Data Protection Officer)

Why This Role Exists

Privacy, data protection, and responsible data governance are critical to customer trust, business growth, and responsible innovation. As Director, Privacy, you will lead Tricentis' global privacy program, serve as the company’s Data Protection Officer, and translate complex privacy and data protection obligations into practical operating models.

This role reports to the Chief Legal Officer. This is an operational legal leadership role. You will ensure the right governance, follow-through, controls, and accountability are in place across the business. You will partner closely with Legal, Security, Product, Engineering, GRC and the CIO organization as Tricentis strengthens privacy governance, AI governance, and enterprise risk management.

What You'll Own

• Lead Tricentis' global privacy program as an operational legal leader who turns privacy requirements into practical privacy governance frameworks, processes, operating procedures and controls.
• Serve as Data Protection Officer for Europe-based privacy obligations, including GDPR, regulatory engagement, privacy risk oversight, and cross-border data protection requirements.
• Monitor and interpret evolving global privacy, data protection, and AI laws and regulations, including GDPR, e-Privacy Directive, CCPA/CPRA, PIPEDA, PDPA, the Australian Privacy Act, the EU AI Act and other emerging AI regulatory frameworks.
• Advise senior leadership on privacy risks, mitigation strategies, and regulatory obligations.
• Support the organization’s ISO/IEC 27701 privacy management program, including audit and certification activities, remediation efforts and ongoing improvements.
• Develop and maintain data protection provisions, addendums and standards for global contract templates, playbooks, compliance documents, training and enablement resources.
• Advise commercial contracting, Sales, Professional Services, Marketing and Go-to-Market teams on privacy and data protection compliance.
• Partner with Legal, Security, Product, Engineering, Procurement, GRC and the CIO organization to embed privacy into product, commercial, operational and AI governance decisions.
• Support operationalization of AI regulatory requirements and privacy-by-design in product development.
• Partner with Product Security and Security teams on incident response and global breach notification requirements.
• Establish privacy training and awareness programs and lead a high-performing global privacy team.

Skills for Success

Required Skills

• Operational privacy leadership and experience designing, implementing and improving enterprise privacy programs.
• Deep knowledge of global privacy frameworks, including GDPR, e-Privacy, CCPA/CPRA, PIPEDA, PDPA, Australian Privacy Act, UK GDPR and AI-related privacy obligations.
• Experience supporting ISO/IEC 27701 or comparable privacy management frameworks.
• Experience serving as a DPO or performing equivalent European privacy responsibilities.
• Ability to advise on DPAs, privacy provisions, customer commitments and commercial agreements.
• Strong cross-functional influence with business, product, security, procurement and go-to-market teams.
• Ability to advise on privacy implications of AI systems, data use, agent governance, technical controls and escalation paths.
• Experience using OneTrust or comparable privacy management platforms.
• Ability to explain complex privacy concepts to diverse audiences, influence senior stakeholders and lead teams through change.

Preferred Skills

• Experience supporting AI governance, responsible data use, technical control review or emerging technology risk programs.
• Experience partnering with product organizations on privacy-by-design initiatives.
• Knowledge of cross-border data transfer requirements, European privacy expectations and global data governance practices.
• Background as a privacy attorney or operational privacy leader working with technical, engineering, security or data governance teams.
• Experience supporting incident response programs and regulatory breach notification requirements.
• Relevant privacy certifications or credentials.

Qualifications

• Qualified to practice law in EU member state.
• IAPP certification, for example CIPP/E, CIPP/US or CIPM.
• 10+ years of experience in privacy, data protection and compliance, with 5+ years in-house at a global software company.

Why Join

• Lead a strategically important function with enterprise-wide visibility and impact.
• Step into a role where operational execution matters as much as legal expertise.
• Influence business decisions, product innovation, customer trust and responsible data practices.
• Partner with senior leaders across Legal, Product, Security and commercial functions.
• Help shape how privacy, AI governance, GRC and responsible technology adoption work together in a global enterprise software company.
• Build and grow a global privacy capability that supports a rapidly evolving business environment.

We are under a legal obligation in Austria to indicate the minimum salary, which is 84 826 EUR gross per year for this position, according to the IT collective agreement. However, attractive compensation packages follow current market salaries and can therefore be significantly above the indicated minimum salary.