The opportunity: 

We are looking for a passionate and dedicated individual to join our Security Compliance team in building out Flexport’s Privacy program. This technical position will include working closely with Legal, Security, Data Governance, Operations, Data Analytics, Engineering, and Executive Management. Key responsibilities include implementing and owning a privacy first capability to ensure Flexport is protecting the privacy of all its stakeholders, including customers, partners and Flexport personnel, in the North America, Europe, and Asia-Pacific regions.

You will:

• Improve on the existing Privacy Program which include the verification of international privacy requirements, creation/updates of policies, procedures, standards and controls, draft a new roadmap, and providing regular reporting on privacy metrics.
• Promote a privacy culture throughout the organization and help create privacy by design and decrease privacy risks; instill accountability and demonstrate the value of privacy across a wide range of individuals including engineers, IT, executives, business operations teams, administrative functions, customers, and regulators, etc.
• Translate privacy requirements in close collaboration with the legal team and devise strategies to detect, report and remediate privacy issues, to ensure compliance with applicable laws and regulations.
• Conduct privacy vulnerability assessments  on Flexport administrative processes (e.g. Sales, Marketing, and HR) and implement solutions to mitigate risks.
• Work with the information security team to manage PII and implement data protection controls.
• Integrate a privacy review process into Flexport’s software product roadmap to make it simple for product engineering teams to understand and implement applicable privacy requirements into Flexport products. The product you’ll help build will make privacy transparent, compliant and trustworthy for Flexport customers and partners.
• Work with the vendor security and legal teams to ensure vendor agreements meet privacy standards.

You should have:

• 5+ years experience with information security, privacy frameworks, privacy principles and/or compliance requirements (e.g. privacy by design, user data protection, GDPR, CCPA, Privacy Shield, data inventory, DLP, encryption, anonymization or privacy impact assessments).
• 1+ years experience translating privacy requirements for a B2B SaaS organization.
• Understanding of one or more industry and/or compliance regulations – PCI-DSS, HIPAA, ISO 27001, FedRAMP, SOC 1/2, preferred; Flexport’s Security Program is ISO 27001 based.
• In-depth knowledge of information security audit, risk management and policy compliance
• Understanding of enterprise cloud infrastructure and data platforms and software development and delivery practices.
• Strong listening and presentation skills necessary to understand, communicate with, and persuade, a wide range of audiences.
• Familiarity with the freight forwarding/global trade industry is a plus.
• A "compliance first" attitude to keep our regulators happy and enthusiastic about Flexport since we operate in a heavily regulated industry.

#LI-Hybrid

Worried about not having any logistics experience? 

Don’t be! Our mission is to make global commerce so easy there will be more of it. That’s why it’s important to bring people from diverse backgrounds and experiences together with our industry veterans to help move the global logistics industry forward.

We know this industry is complex. That’s why we invest in education starting day one with Flexport Academy, a one week intensive onboarding program designed specifically to set every new Flexport employee up for success.