Director Data & Privacy R&D

Director, Data & Privacy R&D

Job ID

520723

Posted since

01-Sep-2026

Organization

Smart Infrastructure

Field of work

Cybersecurity

Company

Brightly Software, Inc.

Experience level

Experienced Professional

Job type

Full-time

Work mode

Remote only

Employment type

Permanent

Location(s)

• Raleigh - North Carolina - United States of America

At Siemens, we help organizations transform maintenance and operations through connected insights, AI-powered technology, and intelligent asset management solutions. Our software enables customers to manage the full lifecycle of assets, facilities, and infrastructure while improving efficiency, reducing risk, and optimizing long-term investments. By connecting data, people, and processes, we empower organizations to make smarter decisions, maximize asset performance, and achieve more resilient operations.

With offices in the US, Canada, UK, Australia, and India, and customers worldwide, our privacy and regulatory obligations are growing with our global footprint.

DESCRIPTION:

Siemens is seeking an experienced Director, Data & Privacy R&D, to lead the implementation and operational execution of Siemens' privacy and data management program within Asset Management Software partnering with Product Management, Engineering, Architecture, Cybersecurity, Data and AI, and Legal/Compliance/Data Privacy. This is an execution-focused role to embed privacy and responsible data practices into product development, platform operation, AI initiatives, and customer solutions by managing the program's core mechanisms: the RoPA, Privacy Requirements checklist, DPIA process, reporting cadence, and cross-functional action tracking.

The Director translates privacy and regulatory requirements set by Siemens Legal and Data & Privacy experts into practical engineering patterns, controls, workflows, and measurable outcomes. While the Chief Information Security Officer (CISO) owns data security and the Data Privacy Officer (DPO) owns regulatory judgment and risk management, this role operationalizes approved requirements to support lawful, consistent handling of data improving audit readiness and the speed and consistency of privacy reviews across the business and owns the technical strategy, impact and implementation.

This U.S.-based role is ideally located in Raleigh, NC; however, we encourage applications from qualified remote candidates across the Eastern U.S.

Qualified Applicants must be legally authorized for employment in the United States and will not require employer sponsored work authorization now or in the future for employment in the United States.

YOU'LL MAKE AN IMPACT BY:

Strategy, Budget, & Privacy Operations Leadership

• Lead the technical execution of Siemens privacy and data governance roadmap in alignment with enterprise strategy and Siemens requirements.
• Build, operate, and continuously improve the company's privacy engineering and privacy operations capabilities.
• Serve as the primary technology liaison to Siemens DPOs, coordinating cross-functional privacy activities and approved requirements.
• Deliver quarterly executive updates on program execution status, technical control maturity, DSR performance and progress against DPO, Cybersecurity, Legal and Compliance identified risk priorities.
• Own the R&D privacy and data governance program budget, forecast needs, and provide clear spend visibility.

Regulatory Translation & Technical Compliance

• Guide product and engineering teams on implementing DPO and Legal approved privacy and regulatory requirements needed to support launches in new regulatory environments.
• Establish privacy-by-design standards built into the SDLC, with measurable, testable controls incorporated into every release..
• Define scalable approaches for data consent, minimization, retention, anonymization, and tenant isolation with architecture, product, and engineering leaders.
• Translate DPO and Legal-approved regulatory requirements (GDPR, EU Data Act, EU AI Act, US state laws and others) into technical specifications, architectural changes and engineering tickets.
• Assess the technical impact of, and implement controls for, key global and regional regimes - GDPR, US state privacy laws, PIPEDA/Quebec Law 25, Australia Privacy Act, India DPDP Act, HIPAA, FERPA, EU Data Act, and the EU AI Act.
• Maintain technical evidence and control documentation showing how privacy and regulatory requirements are implemented within the CI/CD pipeline, with the CISO organization.
• Drive technical governance for cross border data flows, data residency, and customer data segregation, partnering with Security Architecture on shared design patterns.

Data Governance & Security Partnership

• Coordinate the RoPA process and annual recertification.
• Drive adoption of data classification, retention, and deletion controls, including quarterly deletion reporting.
• Chair the monthly Data Governance Council and drive action-owner accountability.
• Run the technical DPIA workflow end-to-end (data flow mapping, control implementation, risk-scoring inputs), routing formal risk determinations and sign-off to the DPO.
• Coordinate technical TIA activities and documentation in partnership with Legal and Siemens privacy stakeholders.
• Co-lead weekly privacy/security triage with the CISO organization for requests and subprocessor decisions.
• Coordinate subprocessor technical reviews and approvals.
• Provide input for monthly and quarterly Privacy and Security KPI dashboards.

Product, Engineering & AI Enablement

• Own and maintain the Privacy Requirements Checklist for technical, architectural and product features, integrations, and data workflows.
• Define engineering standards for collecting, storing, processing, sharing, and deleting customer and personal data.
• Partner with Architecture and Engineering to establish privacy reference architectures and reusable design patterns.
• Embed reusable privacy patterns (consent, residency, anonymization, analytics) into release and design review checkpoints.
• Balance privacy with scalability, performance, usability, and innovation; across engineering tradeoffs.
• Establish privacy metrics and operational KPIs within product engineering organizations.
• Run monthly office hours to unblock product and engineering teams on privacy decisions.
• Establish AI, analytics, and machine learning data governance practices, including controls for training data, synthetic data, model outputs, human review, and retention.
• Partner with AI and Data teams to assess privacy implications of emerging technologies.
• Develop reusable privacy controls and platform services to reduce implementation effort across product teams.
• Drive automated technical controls for AI model transparency, explainability, and data lineage supporting EU AI Act conformity.
• Build technical mechanisms for data portability and interoperability to meet EU Data Act obligations, enabling customers to export and migrate their data.

DSR Operations, Training & Culture

• Own the technical automation and fulfillment of the Data Subject Rights (DSR) workflow across products and regions, executing access, correction, and deletion requirest programmatically across cloud production environments.
• Publish monthly DSR reporting by request type, jurisdiction, completion rate, response time, and escalations.
• Support customer-facing DSR documentation, privacy questionnaires, manage RFP responses and audits and update each annually or following material regulatory changes, in consultation with Cyber/Legal/Compliance/DPO.
• Facilitate on-going data handling trainings (with support from Cyber/Legal/Compliance/DPO) and report quarterly completion and adoption metrics.
• Support maintenance and publication of internal policies under the direction of Cyber/Legal/Compliance/DPO and publish an accessible employee change log.
• Track privacy culture metrics, including training, DPIA timeliness, DSR SLAs, and policy acknowledgements.

THIS IS HOW YOU'LL WIN US OVER:

• Bachelor's degree and 8+ years of progressive experience in technical privacy implementations, technical data handling, or related fields.
• Deep experience translating multi-jurisdictional regulatory and privacy obligations into practical controls, workflows, and engineering actions.
• Strong technical fluency in B2B SaaS or cloud environments, including AI, cloud architecture, multi-tenancy, APIs, incident response, threat models, and access controls.
• Proven delivery of privacy program artifacts and operating mechanisms, including RoPAs, DPIAs, DSR workflows, checklists, training, policies, and governance routines.
• Executive presence and cross-functional influence with product, legal, security, sales, customers, and regulators; IAPP certifications preferred.

YOU'LL THRIVE EVEN MORE IF YOU ALSO BRING:

• Experience leading the technical implementation and strategy of a global enterprise privacy program. Hands-on experience configuring privacy tools such as OneTrust, BigID, TrustArc, Transcend, DataGrail, or similar.
• Experience governing AI/ML data practices, including model training data, automated decision-making, and synthetic data policies.
• Experience implementing and operationalizing international transfer mechanisms such as SCCs, Binding Corporate Rules, adequacy decisions, or the US Data Privacy Framework.
• Experience in asset management, facilities management, or infrastructure technology.
• Comfort driving strategy, clarity and decisions in a global, matrixed organization with ambiguity.

At Siemens, you'll have the opportunity to grow your career while helping organizations operate smarter, safer, and more sustainably. We foster a culture of innovation, collaboration, and continuous learning, where employees are empowered to make a difference every day. If you're excited about solving real-world challenges and shaping the future of asset management, we encourage you to apply.

Our Commitment to Equity and Inclusion in our Diverse Global Workforce:

We value your unique identity and perspective. We are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society, while ensuring that we attract the best talent based on qualifications, skills, and experiences. We welcome you to bring your authentic self and transform the every day with us.

Siemens maintains a Drug Free workplace in accordance with applicable law.

#LI-AR1

You'll Benefit From

Siemens offers a variety of health and wellness benefits to our employees. Details regarding our benefits can be found here: https://www.benefitsquickstart.com/siemens/index.html

The pay range for this position is $162,578 - $278,705 annually with a target incentive of 20% of the base salary. The actual wage offered may be lower or higher depending on budget and candidate experience, knowledge, skills, qualifications, and premium geographic location.

Equal Employment Opportunity Statement

Siemens is an Equal Opportunity Employer encouraging inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to their race, color, creed, religion, national origin, citizenship status, ancestry, sex, age, physical or mental disability unrelated to ability, marital status, family responsibilities, pregnancy, genetic information, sexual orientation, gender expression, gender identity, transgender, sex stereotyping, order of protection status, protected veteran or military status, or an unfavorable discharge from military service, and other categories protected by federal, state or local law.

EEO is the Law

Applicants and employees are protected from discrimination on the basis of race, color, religion, sex, national origin, or any characteristic protected by Federal or other applicable law.

Reasonable Accommodations

If you require a reasonable accommodation in completing a job application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please fill out the accommodations form by clicking on this link Accommodation for disability form. If you're unable to complete the form, you can reach out to our AskHR team for support at 1-866-743-6367. Please note our AskHR representatives do not have visibility of application or interview status.

Pay Transparency

Siemens follows Pay Transparency laws.

Application Deadline

This role will be posted for a minimum of five (5) days from the original posting date. The posting timeline may change based on applicant volume to ensure we attract and consider a strong and representative candidate pool.

California Privacy Notice

California residents have the right to receive additional notices about their personal information. To learn more, click here.

Criminal History

Qualified applications with arrest or conviction records will be considered for employment in accordance with applicable local and state laws.

Job ID

520723

Posted since

01-Sep-2026

Organization

Smart Infrastructure

Field of work

Cybersecurity

Company

Brightly Software, Inc.

Experience level

Experienced Professional

Job type

Full-time

Work mode

Remote only

Employment type

Permanent

Location(s)

• Raleigh - North Carolina - United States of America

At Siemens, we help organizations transform maintenance and operations through connected insights, AI-powered technology, and intelligent asset management solutions. Our software enables customers to manage the full lifecycle of assets, facilities, and infrastructure while improving efficiency, reducing risk, and optimizing long-term investments. By connecting data, people, and processes, we empower organizations to make smarter decisions, maximize asset performance, and achieve more resilient operations.

With offices in the US, Canada, UK, Australia, and India, and customers worldwide, our privacy and regulatory obligations are growing with our global footprint.

DESCRIPTION:

Siemens is seeking an experienced Director, Data & Privacy R&D, to lead the implementation and operational execution of Siemens' privacy and data management program within Asset Management Software partnering with Product Management, Engineering, Architecture, Cybersecurity, Data and AI, and Legal/Compliance/Data Privacy. This is an execution-focused role to embed privacy and responsible data practices into product development, platform operation, AI initiatives, and customer solutions by managing the program's core mechanisms: the RoPA, Privacy Requirements checklist, DPIA process, reporting cadence, and cross-functional action tracking.

The Director translates privacy and regulatory requirements set by Siemens Legal and Data & Privacy experts into practical engineering patterns, controls, workflows, and measurable outcomes. While the Chief Information Security Officer (CISO) owns data security and the Data Privacy Officer (DPO) owns regulatory judgment and risk management, this role operationalizes approved requirements to support lawful, consistent handling of data improving audit readiness and the speed and consistency of privacy reviews across the business and owns the technical strategy, impact and implementation.

This U.S.-based role is ideally located in Raleigh, NC; however, we encourage applications from qualified remote candidates across the Eastern U.S.

Qualified Applicants must be legally authorized for employment in the United States and will not require employer sponsored work authorization now or in the future for employment in the United States.

YOU'LL MAKE AN IMPACT BY:

Strategy, Budget, & Privacy Operations Leadership

• Lead the technical execution of Siemens privacy and data governance roadmap in alignment with enterprise strategy and Siemens requirements.
• Build, operate, and continuously improve the company's privacy engineering and privacy operations capabilities.
• Serve as the primary technology liaison to Siemens DPOs, coordinating cross-functional privacy activities and approved requirements.
• Deliver quarterly executive updates on program execution status, technical control maturity, DSR performance and progress against DPO, Cybersecurity, Legal and Compliance identified risk priorities.
• Own the R&D privacy and data governance program budget, forecast needs, and provide clear spend visibility.

Regulatory Translation & Technical Compliance

• Guide product and engineering teams on implementing DPO and Legal approved privacy and regulatory requirements needed to support launches in new regulatory environments.
• Establish privacy-by-design standards built into the SDLC, with measurable, testable controls incorporated into every release..
• Define scalable approaches for data consent, minimization, retention, anonymization, and tenant isolation with architecture, product, and engineering leaders.
• Translate DPO and Legal-approved regulatory requirements (GDPR, EU Data Act, EU AI Act, US state laws and others) into technical specifications, architectural changes and engineering tickets.
• Assess the technical impact of, and implement controls for, key global and regional regimes - GDPR, US state privacy laws, PIPEDA/Quebec Law 25, Australia Privacy Act, India DPDP Act, HIPAA, FERPA, EU Data Act, and the EU AI Act.
• Maintain technical evidence and control documentation showing how privacy and regulatory requirements are implemented within the CI/CD pipeline, with the CISO organization.
• Drive technical governance for cross border data flows, data residency, and customer data segregation, partnering with Security Architecture on shared design patterns.

Data Governance & Security Partnership

• Coordinate the RoPA process and annual recertification.
• Drive adoption of data classification, retention, and deletion controls, including quarterly deletion reporting.
• Chair the monthly Data Governance Council and drive action-owner accountability.
• Run the technical DPIA workflow end-to-end (data flow mapping, control implementation, risk-scoring inputs), routing formal risk determinations and sign-off to the DPO.
• Coordinate technical TIA activities and documentation in partnership with Legal and Siemens privacy stakeholders.
• Co-lead weekly privacy/security triage with the CISO organization for requests and subprocessor decisions.
• Coordinate subprocessor technical reviews and approvals.
• Provide input for monthly and quarterly Privacy and Security KPI dashboards.

Product, Engineering & AI Enablement

• Own and maintain the Privacy Requirements Checklist for technical, architectural and product features, integrations, and data workflows.
• Define engineering standards for collecting, storing, processing, sharing, and deleting customer and personal data.
• Partner with Architecture and Engineering to establish privacy reference architectures and reusable design patterns.
• Embed reusable privacy patterns (consent, residency, anonymization, analytics) into release and design review checkpoints.
• Balance privacy with scalability, performance, usability, and innovation; across engineering tradeoffs.
• Establish privacy metrics and operational KPIs within product engineering organizations.
• Run monthly office hours to unblock product and engineering teams on privacy decisions.
• Establish AI, analytics, and machine learning data governance practices, including controls for training data, synthetic data, model outputs, human review, and retention.
• Partner with AI and Data teams to assess privacy implications of emerging technologies.
• Develop reusable privacy controls and platform services to reduce implementation effort across product teams.
• Drive automated technical controls for AI model transparency, explainability, and data lineage supporting EU AI Act conformity.
• Build technical mechanisms for data portability and interoperability to meet EU Data Act obligations, enabling customers to export and migrate their data.

DSR Operations, Training & Culture

• Own the technical automation and fulfillment of the Data Subject Rights (DSR) workflow across products and regions, executing access, correction, and deletion requirest programmatically across cloud production environments.
• Publish monthly DSR reporting by request type, jurisdiction, completion rate, response time, and escalations.
• Support customer-facing DSR documentation, privacy questionnaires, manage RFP responses and audits and update each annually or following material regulatory changes, in consultation with Cyber/Legal/Compliance/DPO.
• Facilitate on-going data handling trainings (with support from Cyber/Legal/Compliance/DPO) and report quarterly completion and adoption metrics.
• Support maintenance and publication of internal policies under the direction of Cyber/Legal/Compliance/DPO and publish an accessible employee change log.
• Track privacy culture metrics, including training, DPIA timeliness, DSR SLAs, and policy acknowledgements.

THIS IS HOW YOU'LL WIN US OVER:

• Bachelor's degree and 8+ years of progressive experience in technical privacy implementations, technical data handling, or related fields.
• Deep experience translating multi-jurisdictional regulatory and privacy obligations into practical controls, workflows, and engineering actions.
• Strong technical fluency in B2B SaaS or cloud environments, including AI, cloud architecture, multi-tenancy, APIs, incident response, threat models, and access controls.
• Proven delivery of privacy program artifacts and operating mechanisms, including RoPAs, DPIAs, DSR workflows, checklists, training, policies, and governance routines.
• Executive presence and cross-functional influence with product, legal, security, sales, customers, and regulators; IAPP certifications preferred.

YOU'LL THRIVE EVEN MORE IF YOU ALSO BRING:

• Experience leading the technical implementation and strategy of a global enterprise privacy program. Hands-on experience configuring privacy tools such as OneTrust, BigID, TrustArc, Transcend, DataGrail, or similar.
• Experience governing AI/ML data practices, including model training data, automated decision-making, and synthetic data policies.
• Experience implementing and operationalizing international transfer mechanisms such as SCCs, Binding Corporate Rules, adequacy decisions, or the US Data Privacy Framework.
• Experience in asset management, facilities management, or infrastructure technology.
• Comfort driving strategy, clarity and decisions in a global, matrixed organization with ambiguity.

At Siemens, you'll have the opportunity to grow your career while helping organizations operate smarter, safer, and more sustainably. We foster a culture of innovation, collaboration, and continuous learning, where employees are empowered to make a difference every day. If you're excited about solving real-world challenges and shaping the future of asset management, we encourage you to apply.

Our Commitment to Equity and Inclusion in our Diverse Global Workforce:

We value your unique identity and perspective. We are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society, while ensuring that we attract the best talent based on qualifications, skills, and experiences. We welcome you to bring your authentic self and transform the every day with us.

Siemens maintains a Drug Free workplace in accordance with applicable law.

#LI-AR1

You'll Benefit From

Siemens offers a variety of health and wellness benefits to our employees. Details regarding our benefits can be found here: https://www.benefitsquickstart.com/siemens/index.html

The pay range for this position is $162,578 - $278,705 annually with a target incentive of 20% of the base salary. The actual wage offered may be lower or higher depending on budget and candidate experience, knowledge, skills, qualifications, and premium geographic location.

Equal Employment Opportunity Statement

Siemens is an Equal Opportunity Employer encouraging inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to their race, color, creed, religion, national origin, citizenship status, ancestry, sex, age, physical or mental disability unrelated to ability, marital status, family responsibilities, pregnancy, genetic information, sexual orientation, gender expression, gender identity, transgender, sex stereotyping, order of protection status, protected veteran or military status, or an unfavorable discharge from military service, and other categories protected by federal, state or local law.

EEO is the Law

Applicants and employees are protected from discrimination on the basis of race, color, religion, sex, national origin, or any characteristic protected by Federal or other applicable law.

Reasonable Accommodations

If you require a reasonable accommodation in completing a job application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please fill out the accommodations form by clicking on this link Accommodation for disability form. If you're unable to complete the form, you can reach out to our AskHR team for support at 1-866-743-6367. Please note our AskHR representatives do not have visibility of application or interview status.

Pay Transparency

Siemens follows Pay Transparency laws.

Application Deadline

This role will be posted for a minimum of five (5) days from the original posting date. The posting timeline may change based on applicant volume to ensure we attract and consider a strong and representative candidate pool.

California Privacy Notice

California residents have the right to receive additional notices about their personal information. To learn more, click here.

Criminal History

Qualified applications with arrest or conviction records will be considered for employment in accordance with applicable local and state laws.