Privacy & Compliance Specialist

**Not all heroes wear capes — but plenty of them use toilet paper** Want to challenge yourself at a high-growth startup AND make a difference in the world? Come join the revolootion **Funny name, serious business** We make eco-friendly products and donate 50% of our profits to help build toilets for the billions of people who lack proper access. So far, we've contributed over $10 million AUD (roughly $7.4 million USD) to fund water and sanitation projects around the globe. Basically, we're really good at doing good. With hubs in Australia, the Philippines, China, the US, UK and Europe, our ambitious team of 200+ work tirelessly to make the biggest possible impact for people and the planet. Over the next couple of years, we're working to increase our annual donation tenfold and we won't rest until everyone in the world has access to clean water and sanitation services. **A bit about the role** As a B Corp, we hold our social and environmental practices in the highest regard and so we want to be sure our butts are covered by being proactive in establishing, implementing and maintaining global privacy and compliance policies and procedures as a matter of good governance. That is why we are looking for a **Privacy & Compliance Specialist** who can jump in with their expertise to establish robust and effective practices that allow us to meet our basic compliance requirements, and then build and develop them so that we're proactively buttoned up and ready for what's coming around the corner. Reporting to the Head of Legal, this person will 'own' privacy at Who Gives A Crap, from day-to-day things like privacy deletions and training to big projects like a comprehensive data map. They will also manage our compliance obligations, both in terms of doing a comprehensive review of where we're at now and what gaps need to be filled, and they will be across any changes coming up so we're ahead of the curve. They will project manage our policy project, working with relevant stakeholders to finalise our policies and ensure they remain up to date. Finally, they will work closely with the legal and finance teams on a risk management framework. This role spans privacy & compliance across Australia, the US and UK, so we are seeking someone with working knowledge of privacy practices and/or compliance obligations in at least one of these geos. If you worked here this past month here are some things you might have been involved in: - Working on our travel policy to set us up for success for our company-wide IRL - Setting up systems to track our FSC compliance - Responding to customer privacy queries - Updating our modern slavery statement, ensuring it contains the relevant information while still staying true to our brand - Presenting kick-butt training to our Customer Happiness Team around privacy compliance and customer data **Let's talk about you** You do need not have a legal background, but you certainly have experience working within a regulatory environment, and a degree of comfort dealing with and interpreting legislation is useful. But you also have a healthy disregard for unnecessary red tape. **You see the forest AND the trees** You take a holistic focus to understand and assess the business operations and processes at WGAC and you advocate for a "privacy and compliance by design" approach on how policies and procedures should be applied and embedded into the ways that we work. You are the "go-to" person on all things privacy and compliance and know how to develop an effective privacy and compliance management program as a way to improve processes, accountability, customer relationships and reputation. **Organisation is your superpower** Your time management and project management skills are second to none - you know how to stay focused on what needs to be done but you're also adaptable when things change. You're prepared for the unexpected. As a detail-oriented person you produce high-quality work and can do so reliably. **You don't work in a vacuum - communication and collaboration are your superpowers** You advocate the privacy and compliance message, including the need for continual monitoring and assessment of business processes and practices, by building relationships through collaboration with stakeholders - ensuring privacy and compliance is at the forefront of leadership and management culture, rather than part of a 'set and forget' mindset. You're able to distil complex information into understandable form so that you're able to reach a diverse audience. **You have an analytical mindset** You possess quantitative and qualitative data analysis skills, with an understanding of evaluation and research methodologies. You're able to work independently, think critically, and make sense of challenging data and provide recommendations on the best course of action based on that analysis. You stay calm under pressure and you keep one step ahead in order to mitigate risk and stay on top of the la