Data Protection Officer

Job highlights

• 10+ years of experience in privacy,data protection,governance,GRC,or security engineering,with demonstrated ownership of enterprise programs . Strong working knowledge of GDPR,CCPA / CPRA,and U.S. state privacy laws

We are seeking a highly skilled and results-oriented Data Protection Officer to own and operate InvoiceCloud s enterprise privacy and data protection program. This is a senior individual contributor role responsible for translating complex regulatory requirements into pragmatic, scalable controls that protect people and data while enabling the business to move quickly and responsibly.

The Data Protection Officer serves as the company s authoritative expert on privacy, data governance, and ethical data use. This role partners closely with Legal, Information Security, Product, Data, Engineering, People, and Go-To-Market teams to embed privacy-by-design across systems, data flows, and business processes. Operating with a high degree of autonomy, this role is trusted with highly sensitive information and is expected to exercise sound judgment when balancing regulatory risk, contractual obligations, and business objectives.

This role plays a critical part in strengthening InvoiceCloud s compliance posture, improving visibility into data risk, and supporting responsible innovation as the company continues to scale.

Success Profile

At InvoiceCloud, success is anchored in our core competencies. These competencies guide how every employee delivers impact across their role.

Takes Ownership

• Serves as the authoritative individual contributor for privacy and data protection, making independent decisions within established regulatory, contractual, and risk guardrails.
• Owns the design, execution, and ongoing operation of InvoiceCloud s enterprise privacy and data protection program.
• Leads enterprise data governance practices, including data mapping, classification, retention, and lifecycle management.
• Acts as the primary point of contact for regulators, data subjects, and internal stakeholders, maintaining trust, accountability, and consistency in privacy decision-making.

Drives Efficiency

• Designs and maintains scalable, auditable privacy controls that embed privacy-by-design into products, systems, data flows, and operational processes.
• Standardizes workflows for RoPA, DPIAs, DSARs, vendor privacy reviews, and incident response to reduce friction and improve execution consistency.
• Establishes clear metrics, dashboards, and reporting to provide leadership with visibility into data risk posture and program maturity.
• Continuously refines processes to reduce manual effort, eliminate rework, and support responsible business velocity as the company scales.

Results Driven

• Establishes and executes a measurable enterprise privacy and data protection program that reduces regulatory, contractual, and operational risk.
• Prioritizes high-impact data risks across business units, translating regulatory requirements into actionable plans with defined milestones.
• Delivers timely, high-quality outcomes across DPIAs, DSARs, incident reporting, audits, and ongoing compliance obligations.
• Strengthens InvoiceCloud s compliance posture by ensuring consistent, repeatable execution of privacy controls across the organization.

Innovative

• Leverages GRC platforms, data governance tooling, and collaboration systems to modernize privacy operations and improve scalability and execution quality.
• Applies automation and GenAI to support activities such as data discovery, classification, policy enforcement, and risk analysis, reducing manual effort while increasing consistency and speed.
• Evaluates emerging technologies, regulatory trends, and best practices to continuously strengthen data protection capabilities as the business evolves.

Requirements

• 10+ years of experience in privacy, data protection, governance, GRC, or security engineering, with demonstrated ownership of enterprise programs
• Strong working knowledge of GDPR, CCPA/CPRA, and U.S. state privacy laws; familiarity with PCI DSS, SOC 2, and the NIST Privacy Framework
• Hands-on experience with tools such as Drata, Microsoft Purview, DLP platforms, and data governance solutions
• Proven ability to design measurable controls and balance risk reduction with business enablement
• High integrity and sound judgment when handling sensitive and confidential information