Privacy & Compliance Specialist, Certn

• This is a great opportunity for someone with privacy, data protection, or regulatory compliance experience who wants to deepen their expertise in a high-growth technology company operating in a highly trusted and regulated space
• Some previous experience in data protection, privacy, regulatory compliance, legal operations, risk, audit, or a related function
• Previous experience and practical exposure to UK/EU GDPR, privacy rights requests, compliance documentation, or data protection processes
• Strong written and verbal communication skills, with the ability to explain privacy and compliance concepts clearly to both technical and non-technical audiences
• Strong attention to detail, organization, documentation, and follow-through
• Sound judgment when handling sensitive information, identifying risk, and escalating issues appropriately
• Experience supporting DSARs, deletion requests, privacy rights requests, or data breach response activities
• Ability to work cross-functionally with Legal, Security, Operations, Customer, Product, and Go-to-Market teams
• Comfort working in a fast-paced, high-growth technology environment where priorities can shift and processes continue to evolve
• Post-secondary education in law, business, compliance, privacy, public policy, or a related field, or equivalent practical experience
• If you meet most, but not all, of the qualifications listed above, we still encourage you to apply. We recognize that strong candidates come from a wide range of backgrounds and experiences, and we value the diversity of perspectives that brings

Desirable

• The Privacy & Compliance Specialist, EMEA is responsible for supporting Certn’s UK and EMEA privacy and regulatory compliance program for background screening services
• In this role, you’ll help manage privacy rights requests, maintain compliance documentation, support screening-specific regulatory requirements, and provide practical support to internal teams and customers
• You’ll work under the direction of our Global Privacy Officer, partnering with Legal, Security, Operations, Customer, and Go-to-Market teams
• This role is hands-on and detail-oriented, with a strong focus on helping Certn meet its obligations under UK GDPR, EU GDPR, applicable EMEA privacy and data protection laws, and background screening requirements connected to DBS, Disclosure Scotland, AccessNI, and other relevant regional regulatory bodies
• Support Certn’s UK and EMEA privacy compliance activities under UK GDPR and EU GDPR
• Assist with end-to-end data subject access requests, deletion requests, and related privacy rights requests
• Maintain and update privacy documentation, including Records of Processing Activities, DPIA materials, cross-border transfer documentation, and records related to special category data such as criminal records and biometrics
• Coordinate responses where Certn acts as a processor, in accordance with customer instructions, applicable data processing agreements, and internal escalation procedures
• Support Certn’s compliance framework for certain criminal record disclosure services, including DBS, Disclosure Scotland, and AccessNI requirements
• Help maintain documentation related to umbrella or registered body obligations, eligibility rules, consent frameworks, and permissible checks by jurisdiction
• Create and maintain customer-facing and internal guidance on screening-specific compliance requirements
• Support responses to client inquiries on data handling practices, lawful bases for processing, and screening regulatory requirements
• Assist with RFPs, due diligence questionnaires, and compliance-related customer requests using approved materials and guidance
• Help coordinate client-reported data incidents involving Certn's processing, escalating complex or high-risk matters as appropriate
• Support regional personal data incident and breach assessment activities, including intake, fact-gathering, documentation, escalation, and follow-up
• Partner with Privacy, Legal, Security, and Operations teams to support containment and regulatory notification analysis under UK GDPR and EU GDPR
• Help maintain regional breach response materials and process documentation
• Support the development and delivery of data protection and compliance training tailored to UK/EMEA operations
• Create and maintain internal guidance materials for teams handling criminal records, biometric data, and other sensitive information
• Support external audits and accreditations, including ISO 27001, ISO 9001, and PBSA-related activities
• Assist with internal compliance audits, sub-processor compliance documentation, regulatory tracking, and process improvements

• This is a live role and we are planning to fill it as soon as possible
• We encourage you to apply authentically and avoid relying solely on AI-generated responses, especially during interviews. We want to get to know you and not your Generative AI tools!