SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Perk (formerly TravelPerk) is an intelligent platform for travel and spend management, serving over 12,000 companies globally. The company automates travel bookings, expenses, invoice processing, and related workflows using AI technology. With 1,800+ employees across 12 offices and headquarters in London and Boston, Perk is a SaaS and AI technology scale-up backed by world-class investors.
As Head of Privacy, you will lead and scale Perk's customer trust program and drive privacy operations strategy. This is a hands-on leadership role combining strategic direction with execution bias. You will simplify the complex regulatory landscape of privacy, AI, cybersecurity, and data governance into outcomes that customers and staff can understand and trust.
Key responsibilities include:
- Own and evolve Perk's global privacy program, setting risk-based strategy, roadmap, policies, and controls aligned with applicable laws and regulatory expectations.
- Contribute to Perk's global AI governance program, working closely with security, legal, and product teams.
- Advise the Chief Legal Officer, executive team, and business leaders on material privacy risks and help them make practical choices that protect individuals and manage compliance exposure.
- Maintain accurate visibility of Perk's personal data and processing activities, including records of processing activities (ROPA), data flows, classification, lawful bases, and cross-border transfer mechanisms.
- Oversee operational privacy controls including data retention and deletion, cookies and tracking, consent management, marketing compliance, privacy notices, and handling of data subject requests.
- Support data governance protocols in collaboration with Data, Engineering, and Security teams.
- Lead risk-based reviews of new personal data processing initiatives, including privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and AI risk assessments.
- Partner with Security on privacy requirements and coordinate privacy workstreams for data breach response.
- Own privacy risk reporting and escalation.
You will manage a team of two and collaborate closely with the Data Protection Officer (DPO), Security, People/HR, Procurement, Product and Engineering, Data, Revenue, and Customer Care teams. The role requires approximately seven years of privacy specialization experience, strong technical literacy, and the ability to deploy automation and technology to create user-friendly workflows while maintaining best-in-class data protection standards.
