Director, Privacy Officer (GDPR)

Location: Billund, Denmark. Hybrid working with the option to work from home up to two days per week.

Company

hirify.global is a global consumer products company operating through the hirify.global Group and serving children and consumers worldwide.

What you will do

• Set strategic legal direction and personally develop, draft and maintain privacy policies for direct-to-consumer activities, marketing and advertising technology.
• Develop practical standards for kids’ privacy, controller and joint-controller responsibilities, and third-party supplier compliance.
• Translate complex privacy requirements into risk-based guidance, templates, playbooks and improved processes.
• Lead or support privacy risk assessments, DPIAs, audits, investigations, breach assessments and supervisory-authority enquiries.
• Work with Legal, Compliance and Risk, digital and physical security, audit and business stakeholders to resolve complex privacy matters.
• Build privacy awareness, coach colleagues and strengthen governance, privacy-by-design, reporting and assurance across the global organisation.

Requirements

• Qualified lawyer with at least 10 years of post-qualification legal experience in a law firm, in-house legal function or another role involving substantive legal practice.
• At least 5 years applying GDPR in legal practice, with extensive expertise in privacy and data-protection law, including lawful bases, data-subject rights, transparency, accountability, international transfers, DPIAs, controller/processor roles and breach handling.
• Experience setting strategic direction, identifying emerging risks, forming legal positions and developing risk-based privacy policies, standards or guidelines.
• Experience advising on consumer privacy law and enforcement matters, as well as commercial or IT agreements, transactions and M&A or integrations involving privacy responsibilities.
• Experience with international transfers, data processing agreements, standard contractual clauses, privacy requirements outside the EU/EEA, and jurisdictions such as the UK, US, China, South Korea or APAC.
• Demonstrated hands-on delivery of legal analysis, written advice, policies, guidance and process improvements from scoping through completion; privacy programme management alone is insufficient.
• Ability to communicate complex requirements clearly, assess risks, recommend proportionate mitigations, manage competing priorities and operate independently without relying on direct reports.
• Ability to collaborate in a flat team, share knowledge, welcome constructive challenge and influence through expertise rather than hierarchy.
• Experience working with senior stakeholders, external counsel, auditors and, where relevant, supervisory authorities on complex privacy matters.

Nice to have

• Experience developing employee-data privacy guidance and reviewing IT contracts for privacy and data-protection requirements.
• Experience with kids’ privacy laws, privacy litigation, regulatory enforcement cases, practical privacy controls, templates, playbooks, governance or assurance.
• Privacy certifications such as CIPP/E, CIPP/US or CIPM.

Culture & Benefits

• Small, closely connected Privacy Office with a global outlook and flat, collaborative working style.
• Hybrid work model offering up to two days per week from home, subject to role and team arrangements.
• Enhanced family care leave, life and disability insurance, wellbeing resources and community programmes.
• Colleague discount from the first day and bonus scheme where eligible.
• Commitment to inclusion, equal employment opportunity, children’s rights and child wellbeing.
• Roles with high engagement with children require Child Safeguarding Background Screening as a condition of the offer.

Hiring process

• Applications are reviewed on an ongoing basis; the role may be amended or withdrawn before any advertised closing date, so early application is encouraged.