Director of Data Privacy and Compliance

LSAC’s mission is to advance law and justice by promoting access, equity, and fairness in law school admission, to broaden the pathway into legal education, and to support law schools, law students, and the legal education community.

Pay rate: $140,000 to $157,000, depending on experience

This is a remote position.

The Director of Data Privacy and Compliance is a leadership role responsible for implementing and overseeingLSAC’s data privacy and compliance strategies.

This role ensures LSAC adheres to global, regional and industry specific data protection regulations, mitigates privacy risks, and fosters a cultureof ethical data management practices.

Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of this position. The individual employed in this position will be required to:

• Work in close partnership with LSAC’s Office of General Counsel, and specifically, the Senior Counsel – Privacy and Compliance, to develop data privacy and compliance strategies and initiatives.
• Drives organizational change through privacyinitiativeandprojectleadership of cross-functional teamscomprisedof internal Privacy Team resources,business unit personnel, and technical/ITteams.
• Guide andmaintaintheLSAC Privacy Roadmapthroughdefinition an downership ofitsunderpinning work program, working in collaboration with key stakeholders, particularly LSAC’s Officeof the General Counsel.
• Guide and support privacy management platform implementation inline with
  
  Privacy Roadmap priorities.
• Serve as Data Subject Access Rights (DSAR) process owner responsible foraccurateandtimelyfulfillment of DSAR requestssubmittedby LSAC’s range of customer types.
• Contribute to the formation and ongoing support of Data Governance data protection policies, procedures, and data handling practices.
• Oversee development and maintenance ofdata inventory to ensure adherence to privacy policies, standards, and regulations.
• Develop andmaintainLSAC’s Record of Processing Activities(ROPA) as alog ofhowLSACprocessespersonaldata.
• Regularlyconductcompany-wide training campaigns to promotesound privacy practices into technical and business operations.
• Serve asback-end (IT)
  Records Management/Retentionprocessesownerassuringthatcustomer recordsaremaintainedin accordance withLSACRecords Management Policy.
• Identify, assess, and mitigate data protection risks across LSAC data estate.
• Promote and deliver privacy tooling that meets internal and external customer expectations through collaboration with analysts, software developers, engineer leads, product managers, and business stakeholders.
• Periodically prepare and present data privacyprogramand project status to senior management.

• Strong written and verbal communication skills.
• Holds a strong sense of accountability for both individual and team objectives.
• Embraces a forward-thinking mindset, contributing to a culture of continuous improvement and creativity.
• Excellent time management, prioritization, attention to detail and organization skills
• Strong analytical, problem solving, and decision-making skills.
• Ability to manage cross-functional teams and drive organizational change.
  
  Candidate must have strong Project Management Skills
• Continually seek methods and techniques to improve ways of working, particularly tooptimizeproductivity ofsurrounding teams.
• Excels atleadingteamsin an agile environment andovercoming professional challenges both personally and for involved teams.

• B.A. or B.S. degree(M.S.preferred) and5+ years related experience.
• Minimum 3 years’ experience with recordsmanagementas itpertainsto retention and compliance requirements.
• Exposure to an implemented and operational data…