Director - Privacy and GRC

Lead with Vision. Drive Transformation. Shape Global Privacy & Governance.

Are you a seasoned privacy, security, and governance professional looking to take the next major step in your leadership journey?

At Tsaaro, we don’t just deliver compliance — we redefine how organizations implement privacy, information security, and governance frameworks at scale.

We’re growing rapidly and are looking for a Director – Privacy & GRC who thrives in high-impact environments, understands complex regulatory ecosystems, and has a proven track record of leading large-scale privacy and governance programs for clients.

About Tsaaro

At Tsaaro, privacy and security are not side functions — they are our core. Our team includes dedicated privacy consultants, GRC specialists, and cybersecurity experts, all collaborating to empower organizations with tailored, effective, and scalable solutions.

We bring a practical, risk-based consulting approach, offering clients actionable insights and hands-on support to help them manage privacy risks, demonstrate compliance, and strengthen their governance and security posture.

As a Director, you will serve as a senior strategic advisor to our clients, leading enterprise-wide engagements across privacy governance, risk management, and compliance frameworks.

Key Responsibilities:

• 
  Design, lead, and oversee enterprise-level privacy, GRC, and data protection programs tailored to client needs.

• 
  Evaluate clients’ privacy, governance, and security controls at a strategic level, identifying gaps and developing transformation roadmaps.

• 
  Lead advanced assessments including privacy gap assessments, DPIAs, PIAs, RoPA, internal audits, and enterprise-wide risk assessments.

• 
  Provide senior-level advisory on GDPR, CCPA, DPDP Act, PDPL, and emerging global regulations.

• 
  Develop, review, and approve privacy policies, governance frameworks, and compliance documentation.

• 
  Drive and supervise implementation of ISO 27001, ISO 27701, NIST, SOC 2, and related frameworks.

• 
  Oversee incident response planning, breach readiness, Data Subject Rights programs, and governance structures.

• 
  Conduct and review end-to-end third-party risk assessments and enterprise audit readiness programs.

• 
  Collaborate with senior client stakeholders (CISO, DPO, CTO, Legal, Compliance) to deliver strategic privacy and GRC solutions.

• 
  Lead cybersecurity-aligned GRC initiatives including policy creation, internal audit programs, governance structures, and enterprise compliance strategy.