Data Privacy Counsel

About VERITAS

Veritas Technologies solves what no one else can. As the leader in secure multi-cloud data management, over 80,000 customers - including 91% of the Fortune 100 - rely on Veritas to help ensure the protection, recoverability, and compliance of their data.

Veritas has a reputation for reliability at scale, which delivers the resilience its customers need against the disruptions threatened by cyberattacks, like ransomware. No other vendor is able to match Veritas’ ability to execute, with support for 800+ data sources, 100+ operating systems, 1,400+ storage targets and 60+ clouds through a single, unified approach. Powered by Cloud Scale Technology, Veritas is delivering today on its strategy for Autonomous Data Management that reduces operational overhead while delivering greater value. Learn more at


Veritas solves what no one else can. With an industry-leading product portfolio, we offer proven, modern and integrated technology that brings together availability, protection, and insights. Our Veritas Enterprise Data Services Platform addresses current and future data issues end-to-end - keeping mission-critical workloads highly available, protecting data everywhere, and providing insights to optimize costs and maintain regulatory readiness.

Veritas supports 500+ data sources, 150+ storage targets, 50+ clouds, and any deployment model imaginable. We serve 99% of the Fortune 100, 94% of the Fortune 500, and are the market leader in Software-defined Storage, Data Protection, and Archiving.
- Job Purpose

The Veritas Privacy Office provides comprehensive privacy oversight, advisory and risk management advice to internal stakeholders across the Global Veritas group of companies.

Reporting to the Head of Privacy, the Data Protection Counsel will support the ongoing delivery and maintenance of the Veritas privacy framework across the Veritas Group.

This is an ideal position for someone with a genuine interest in data protection and privacy, security, and technology.
- Key Responsibilities
- Support the ongoing development, implementation, and documentation of the Veritas privacy framework in accordance with applicable laws and regulations.
- Raise awareness and deliver training to stakeholders at all levels in the organisation to promote a positive data protection culture across the Veritas Group.
- Take ownership of the internal Privacy Impact Assessment process as it applies to Veritas products, services and third parties on a day-to-day basis. Advise on optimal technical and organizational measures to protect and safeguard personal data in support of the concept of Privacy by Design.
- Act as a point of contact for data incidents, support management of the same and escalating to the Head of Privacy for timely advice in relation to breach reporting requirements.
- Maintain documentation to demonstrate compliance and/or accountability to meet regulatory obligations including but not limited to:

- A record of processing activities and data flows
- Registrations with regulators (where registration is required)
- The transfer mechanism used for cross-border data flows (e.g., standard contractual clauses, EDPB recommendations) including records of the Group entities that have signed the Intra Group Data Transfer Agreement
- Monitor compliance with internal policy and the obligations set out in the relevant laws and regulations, including but not limited to:

- Supporting procurement as part of the supplier engagement process.
- inclusion of appropriate data protection clauses in supplier contracts.
- completion of PIAs, and that data protection issues identified during PIAs/DPIAs are remediated /mitigation actions are closed.
- data privacy incident/breach metrics (e.g. nature of breach, risk, root cause) and completion of remediation activities identified as part of investigation or post investigation review.
- Conduct periodic checks of data protection compliance within the Veritas Group functions, identifying shortcomings, making recommendations for remediation and advising on risk.
- Maintain ongoing and current knowledge of evolving global data protection and privacy laws.
- To take on any other duties which are within the employee’s skills and abilities whenever reasonably instructed.
- Deputize for the Head of Privacy where required.
- Person Specification
- Significant experience in privacy and data protection law in an international commercial environment (min of five years).
- Demonstrable experience of managing privacy regulatory matters, compliance reviews and how it impacts business functions.
- Understanding of the interrelationships between data protection, technology and security.
- Former tech company experience
- good understanding of product design, software development lifecycle, SaaS offerings and embedding privacy in technology platforms.
- Experience of concurrently managing multiple internal stakeholders and complex projects to tight deadlines.
- Ability to operate comf