Privacy Specialist
GitLabSalary not specified
Not SpecifiedCompensation
N/AExperience Level
N/AJob Type
Not SpecifiedVisa
N/AIndustries
Requirements
- At least 7 years of experience in privacy operations, compliance and program management in educational technology or broader education sectors
- Proven success leading enterprise-wide privacy initiatives, including policy development, training, and operational implementation
- Experience with privacy assessments, DSAR response workflows, and regulatory alignment
Responsibilities
- Lead and evolve the company’s global privacy program with clear accountability, measurable goals, and cross-functional alignment
- Develop and maintain internal privacy policies, procedures, and governance frameworks
- Establish a privacy architecture that aligns with global regulations and organizational values
- Deliver regular reports to leadership on program effectiveness, risks, and remediation efforts
- Scale and maintain the organization’s privacy operations to protect personal data across customer, employee, and internal systems
- Ensure compliance with global privacy regulations (e.g., GDPR, CCPA/CPRA, PIPEDA, FERPA)
- Conduct and manage risk assessments, including DPIAs, PIAs, DSARs, and third-party privacy reviews
- Manage data inventory and mapping, including records of processing activities (ROPA)
- Define and improve technical and operational controls for data retention, access management, consent, and data minimization
- Conduct privacy assessments of vendors and manage third-party risk related to data handling
- Manage and respond to DSARs within regulatory timelines
- Partner with Product, Engineering, Security, and Legal to embed privacy-by-design principles across the company’s systems and products
- Collaborate on data classification, localization, and sovereignty strategies with security and infrastructure teams
- Participate in cross-functional projects involving data governance, customer controls, and tooling for privacy features
- Serve as the privacy lead for external audits, certifications (e.g., ISO 27701, SOC2 Privacy), and regulatory inquiries
- Build scalable processes for privacy monitoring, evidence collection, and reporting using GRC platforms and automation
- Participate in incident and breach response processes, including regulatory notifications when required
- Develop and deliver engaging privacy training and awareness programs across the organization
- Foster a culture of privacy and data responsibility
- Serve as the organization’s privacy liaison to customers and regulators as needed
Skills
Instructure
Education technology for teaching and learning
About Instructure
Instructure focuses on enhancing the educational experience for teachers and students through its technology solutions. The main product, Canvas, is a learning management system (LMS) that enables educators to create, manage, and deliver course content effectively. This platform supports various educational institutions, including K-12 schools, universities, and corporate training programs, by providing a user-friendly interface for both instructors and learners. Unlike many competitors, Instructure operates on a subscription model, allowing institutions to access its services and tools for a fee. The goal of Instructure is to empower educators and improve student outcomes by providing effective teaching tools and resources, serving over 30 million users in more than 6,000 organizations globally.
Cottonwood Heights, UtahHeadquarters
2008Year Founded
$86.7MTotal Funding
IPOCompany Stage
EducationIndustries
1,001-5,000Employees
