PRIVACY & DATA PROTECTION PROFESSIONAL (HYBRID-CHARLOTTE, NC)

Compass Group USA Inc•Charlotte, NC

45d•Hybrid

About The Position

Compass Group USA is seeking an experienced Privacy Professional to join our Legal & Compliance team. This role will focus on ensuring compliance with applicable US state and federal privacy laws governing consumer goods sales, advertising, marketing, and the collection, processing, and use of personal information. The ideal candidate will have a strong understanding of privacy frameworks and experience working in organizations with diverse industry exposure, and the ability to coordinate across multiple teams.

Requirements

Education & Experience:
Bachelor's degree from an accredited US college or university in a related field.
Minimum 3-5 years of experience in privacy, data protection, or similar compliance roles at a company governed by state and federal US privacy laws.
Privacy Expertise:
Required: Strong knowledge of U.S. state privacy laws; familiarity with global frameworks (GDPR) is a plus.
Excellent analytical, communication, and project management skills.
The ability to translate complex privacy laws into business-applicable advice and controls.
Ability to work in fast-paced environments with diverse industry exposure.

Nice To Haves

Preferred: Experience with HIPAA compliance.
CIPP/US, CIPM, or similar privacy certification.
Bonus: Knowledge of GLBA, FERPA, and other sector-specific regulations.

Responsibilities

Regulatory Compliance:
Monitor and interpret state privacy and Artificial Intelligence laws (e.g., CCPA, CPRA, VCDPA, and similar) impacting consumer goods, advertising, and marketing activities.
Advise business units on compliance obligations related to personal information collection, processing, and sharing.
Help build and maintain strong privacy controls and systems to maintain privacy compliance.
Manage the company DSAR process and tooling.
Policy Development & Implementation:
Draft, review, and maintain privacy policies, notices, and consent mechanisms across websites and mobile applications.
Embed privacy-by-design principles into marketing and technology initiatives and applications purchased and created by the company.
Risk Management:
Conduct Privacy Impact Assessments (PIAs) and maintain Records of Processing Activities (RoPA).
Support incident response and breach management in collaboration with IT and cybersecurity teams.
Training & Awareness:
Deliver privacy training to marketing, sales, and operational teams, and educate the company around core privacy principles.
Promote a culture of compliance across diverse business units.