Director of Corporate Compliance, Data Privacy & Cybersecurity

Greystar Management Services•Carolina, TX

1d•Remote

About The Position

This role serves as a key advisor on enterprise compliance, data privacy, and information security matters, helping Greystar navigate an increasingly complex regulatory landscape while enabling business growth and innovation. The position develops and maintains the corporate compliance program, advises on global privacy requirements and cybersecurity legal obligations, and partners with business, IT, and Information Security teams on risk management and response practices.

Requirements

Six years of relevant experience in corporate compliance, data privacy, and/or cybersecurity.
Prior experience building or scaling a compliance program.
Prior experience briefing senior leadership in a time-sensitive and dynamic environment.
Ability to translate complex legal requirements into practical business guidance.
CIPP/US or CIPM certification, a similar certification, or the ability to become certified within one year.
Bachelor of Arts degree required.
Highly collaborative instincts and ability to manage cross-functional projects.

Nice To Haves

Master's degree or J.D. degree.
CIPP/US or CIPM certification, or a similar certification.

Responsibilities

Develop, implement, and maintain the corporate compliance program, policies, and training.
Monitor regulatory developments and assess their impact on the business across jurisdictions.
Conduct internal investigations and compliance audits, and recommend remediation.
Advise business units on codes of conduct, anti-corruption requirements, conflicts of interest, and whistleblower matters.
Track and report compliance metrics to leadership and the board, as appropriate.
Support M&A due diligence related to privacy, security, and compliance risk.
Advise on compliance with global privacy laws and other applicable privacy frameworks.
Draft, review, and negotiate data processing agreements, data sharing agreements, and privacy-related contract terms.
Conduct and oversee privacy impact assessments and data mapping exercises.
Manage data subject rights requests and privacy incident response.
Develop and test privacy incident response procedures with IT and Information Security, including response responsibilities, escalation paths, and tabletop exercises.
Maintain and update privacy policies, notices, and internal governance documentation.
Advise on cybersecurity legal obligations, including breach notification laws and applicable sector-specific requirements.
Review and negotiate vendor and third-party security terms, cyber insurance policies, and incident response plans.
Partner with IT and Security teams on risk assessments, tabletop exercises, and security program development.

Benefits

Competitive medical, dental, vision, disability, and life insurance benefits.
Low-cost or free basic employee medical coverage for employee-only coverage.
Paid time off, including 15 vacation days, 4 personal days, 10 sick days, and 11 paid holidays for new hires.
Birthday off after one year of service.
Additional vacation accrued with tenure.
Onsite housing discount at Greystar-managed communities for onsite team members, subject to discount and unit availability.
Six-week paid sabbatical after 10 years of service and every five years thereafter.
401(k) with company match up to 6% of pay after six months of service.
Paid parental leave.
Lifetime fertility benefit reimbursement up to $10,000, including adoption or surrogacy.
Employee Assistance Program.
Critical illness, accident, hospital indemnity, pet insurance, and legal plans.
Charitable giving program and benefits.
Potential eligibility for a quarterly or annual bonus based on individual and company performance.