Head of Privacy (AI)

Location: Barcelona, Spain; hybrid work with in-person attendance three days per week and residence within commuting distance of a hirify.global hub. Relocation support to one of the hubs may be available for certain roles.

Company

hirify.global is an AI-powered SaaS platform for travel, spend management, expense processing, and invoice payments, serving more than 10,000 companies worldwide.

What you will do

• Own and evolve the global privacy program, including its risk-based strategy, roadmap, policies, controls, and customer trust initiatives.
• Contribute to the global AI governance program and advise executives and business leaders on material privacy, AI, cybersecurity, and data governance risks.
• Oversee privacy operations covering data inventories, processing activities, cross-border transfers, retention, cookies, consent, marketing compliance, notices, and individual rights.
• Lead privacy reviews for new processing activities, including PIAs, DPIAs, legitimate interest assessments, AI inventories, classifications, and impact assessments.
• Partner with Security, Engineering, Product, Data, People/HR, Procurement, Revenue, and Customer Care on privacy by design, incidents, third-party risk, and customer commitments.
• Manage a team of two and oversee privacy tooling, automation, risk reporting, assurance, metrics, and Trust Center resources.

Requirements

• Approximately seven years of experience developing a privacy specialization, with experience driving operational outcomes.
• AI fluency, curiosity about large language models, and practical experience using AI tools such as Claude to build workflows.
• Knowledge of global privacy, cybersecurity, and AI regulations, including GDPR, CCPA, EU AI Act, NIS2, DORA, and the EU Data Act.
• Experience working with fast-paced engineering and product development teams, with strong communication, storytelling, and collaboration skills.
• Ability to work from within commuting distance of a hirify.global hub and attend the office three days per week.
• English is the official language at the office; submit the application materials in English.

Nice to have

• Knowledge of ISO 27001, ISO 27701, ISO 23894, ISO 42001, NIST Privacy and AI Risk Management Frameworks, SOC 2, and Privacy by Design principles.
• Experience with privacy-enhancing technologies, privacy tooling, automation, and customer trust programs.

Culture & Benefits

• Hybrid, IRL-first work model with collaboration in person three days per week.
• Competitive compensation with equity ownership and a flexible compensation plan.
• Vacation days, public holidays, private healthcare or a gym allowance, life insurance, and paid parental leave.
• Wellbeing support with access to therapy and coaching sessions for employees and their loved ones.
• Up to 20 Work from Anywhere days per year, paid volunteering time, language lessons, and a paid sabbatical after five years.
• Relocation support to one of hirify.global’s hubs may be available for certain roles.

Hiring process

• Interviews include discussion of how candidates use AI and how they evaluate its outputs.
• Submit an updated resume and portfolio in English.