Location: Mexico City
About the Position
We are seeking a a Privacy Operation Specialist in our global Privacy team to support privacy and cybersecurity compliance across Latin America while contributing to global privacy operations. This role is responsible for the end‑to‑end coordination and operational management of Data Subject Requests (DSRs) across the organization, contract review, data privacy impact assessments and broader privacy operations management support. You will work closely with senior privacy counsel, data owners, and cross‑functional teams to ensure timely, compliant, and high‑quality responses.
The candidate must have either legal, cybersecurity or technical background and some prior exposure to privacy and data protection , strong communication skills with business and product teams, and familiarity with information security issues. Approximately 30% of the role will be dedicated to cybersecurity-related matters, requiring sufficient knowledge to interact with technical teams, assess legal and regulatory risks, and support incident response.
At times this role may also be partnering with the global operation lead on global projects, such as implementation of global privacy tools and optimization of review processes.
Key Responsibilities
-
Serve as the subject matter expert (SME) for privacy operations and initiatives with an impact in Mexico and the broader Latin America region.
-
Review data protection documents, impact assessments, privacy questionnaires, data flows, regulatory risks and mitigation measures, data subject requests (DSRs), processing records, training programs, internal policies, and privacy compliance controls.
-
Collaborate closely with privacy counsel to escalate complex cases, validate legal interpretations, and ensure appropriate handling of sensitive requests.
-
Support internal departments on issues related to privacy, personal data protection, and cybersecurity.
-
Provide guidance on the practical application of Mexican personal data protection legislation and, when necessary, applicable regional and global frameworks.
-
Review contractual clauses, privacy terms, internal policies, privacy notices, and documents related to the processing of personal data.
-
Manage and maintain privacy tools such as Onetrust, including configurations, workflows, and reporting.
-
Collaborate with information security teams on security incidents, data breaches, technical controls, vulnerability management, cyber risks, and related regulatory requirements, to make sure projects/tasks are on track and well documented.
-
Monitor regulatory trends and best practices in privacy, data protection, AI, information security, and technology.
-
Prepare and present privacy metrics and dashboards to stakeholders and leadership.
-
Collaborate with privacy specialists and regional counsel in other geographies to ensure consistent implementation of cookie compliance approaches.
-
Participate in cross-regional working groups to align on best practices, tools, and enforcement standards.
Requirements
-
A law degree
-
At least five years of experience in privacy compliance, either at a prestigious law firm or within the legal or compliance function of a multinational corporation.
-
Knowledge of Mexican personal data protection legislation, including obligations related to privacy notices, consent, data subjects’ rights, data transfers, security measures, and incident management.
-
Practical knowledge of information security, cybersecurity, and incident management involving personal data.
-
Excellent organizational and time‑management skills.
-
Ability to work with multidisciplinary and multicultural teams, including legal, product, engineering, information security, and business units.
-
Fluent english is essential for interacting with global teams
-
Strong communication skills, practical legal judgment, organizational skills, business oriented approach and the ability to prioritize tasks in a dynamic environment.
Key Qualifications
-
Familiar with LFPDPPP, GDPR, LGPD, CCPA/CPRA, or other international data protection laws is a plus.
-
Familiar with privacy governance tools, GRC, third-party management, or processing activity logs.
-
Certifications in privacy, data protection, or information security, such as CIPP/E, CIPP/US, CIPM, CDPO, ISO 27001, Security+, CISSP, or equivalent.
#PCSD #Lenovo
We are equal opportunity employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age national origin, religion, sexual orientation, gender identity, status as veteran and basis of disability or any other federal, state, or local protect class.
If you belong to a priority group, such as people with disabilities, we encourage you to share this information if you wish. This will allow us to provide you with reasonable accommodation and ensure an accessible, equitable, and fair selection process.
