Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.
What is The Role
Join our award-winning, globally distributed legal organization as a Privacy Program Manager. You'll join a team of 4 data privacy professionals on our global Business Integrity team, and will report to the Director of Privacy based in Brussels, Belgium.
Data privacy is a business imperative at Elastic. This role will be instrumental to the success of our privacy compliance operations! Duties will include handling privacy inquiries and requests, running core privacy processes, automating workflows, tracking and reporting on projects. We are looking for a self-starter eager to lead change, keen on using technology creatively to promote efficiency and to grow the privacy program in a dynamic multicultural environment.
What You Will Be Doing
- Lead privacy assessments (PIAs, LIAs, DPIAs, TIAs). Conduct and coordinate privacy risk reviews related to product development, business processes and the use of third parties.
- Respond to privacy questions and compliance inquiries, e.g., data subject access requests.
- Team up with fellow privacy professionals to map Elastic’s privacy practices to current and emerging laws and regulations worldwide. Document compliance, identify gaps, and help craft durable and scalable remediations.
- Engineer continuous improvements to privacy processes, tools and workflow automations. Enhance and expand internal privacy and AI compliance review processes.
- Support cookie compliance on Elastic’s public facing web properties and applications. Supervise cookie consent mechanisms and curate cookie policies and notices.
- Help internal privacy champions identify departmental privacy needs and assist with their privacy roadmaps, data maps, flow diagrams, records of processing activities, risk assessments, etc.
- Partner with Legal Operations, IT, Information Security and Engineering to embed relevant privacy-enhancing solutions into products and business processes.
- Support and dashboard the Privacy Team's strategic projects to maintain and advance privacy compliance.
- Develop and strengthen measurable and scalable processes for demonstrating the privacy program’s progress and performance.
- Assist with privacy-related communications within the organization, such as writing for executive presentations, newsletters, team updates.
- Help the team maintain and develop the privacy intranet and web contents.
As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do.
We strive to have parity of benefits across regions and while regulations differ from place to place, we believe taking care of our people is the right thing to do.
- Competitive pay based on the work you do here and not your previous salary
- Health coverage for you and your family in many locations
- Ability to craft your calendar with flexible locations and schedules for many roles
- Generous number of vacation days each year
- Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service
- Up to 40 hours each year to use toward volunteer projects you love
- Embracing parenthood with minimum of 16 weeks of parental leave
- Bachelor's degree in Law, Information Technology, Business Administration, or equivalent experience. Familiar with global privacy laws and well versed in regulatory horizon scanning. Professional certifications such as CIPP, CIPM, CIPT are a plus.
- 3-5 years of experience in privacy programs and operations, data protection or adjacent areas, preferably in the field of business software / SaaS.
- Experience in performing various types of privacy assessments and risk reviews, delivering timely, actionable, business-friendly advice to mitigate risk pragmatically. Confidence in handling and fulfilling data subject requests at scale.
- Strong organizational, prioritization and time management skills, comfortable handling multiple projects simultaneously and consistently across functions.
- Strong analytical and creative problem-solving skills, with high attention to detail to ensure accuracy in compliance analysis, documentation, and reporting.
- Expertise in privacy-enhancing technologies, familiarity with cybersecurity, data governance knowledge, AI/GenAI literacy, experience in using AI for compliance will be highly appreciated.
- Proficiency in written and spoken English, eagerness to work cross-functionally and to build strong relationships.
