Data Protection Officer

We are seeking a highly skilled and results-oriented Data Protection Officer to own and operate InvoiceCloud's enterprise privacy and data protection program. This role requires strong ownership, execution discipline, and the ability to influence outcomes without formal authority, balancing regulatory risk, contractual obligations, and business objectives.

Requirements

• 10+ years of experience in privacy, data protection, governance, GRC, or security engineering, with demonstrated ownership of enterprise programs
• Strong working knowledge of GDPR, CCPA/CPRA, and U.S. state privacy laws; familiarity with PCI DSS, SOC 2, and NIST Privacy Framework
• Hands-on experience with tools such as Drata, Microsoft Purview, DLP platforms, and data governance solutions
• Proven ability to design measurable controls and balance risk reduction with business enablement
• High integrity and sound judgment when handling sensitive and confidential information