Privacy Assurance & Compliance Specialist

Every mind is unique. Yet much of the world is still built for what’s considered "normal," leaving too many people behind. At Everway, we change that by creating technology that helps everyone understand and be understood. By understanding and addressing the unique needs of each individual, we're creating a world where differences are recognized and valued. Our careers fit real life. When you join us, you’re not just taking a job. You’re joining a movement to build a more neuroinclusive world. We’re a global community of over 800 employees spanning North America, UK, Europe, Australia, and New Zealand. A career here is purposeful and fast-moving, with clear expectations, modern tools, and the clarity to focus on what matters most. Our people are supported and encouraged to show up as they are, with different ways of thinking welcomed and valued. We pride ourselves on our core values that are embedded within our culture. These are to be curious, have courage, and commit fully . Join us at Everway - together, we can unlock the full potential of every mind. About the role The Privacy Assurance & Compliance Specialist will manage and support the day-to-day delivery of Everway’s global privacy assurance and compliance programme, supporting the Director of Compliance in their capacity as Data Protection Officer (DPO). The role will help ensure that privacy and data protection requirements are embedded into Everway’s products, systems and business processes and that privacy risks, controls and regulatory obligations are effectively identified, managed, monitored and evidenced.

Working closely with Legal, Data Governance, Information Security, Product, Engineering, People and other business teams, the role will provide practical privacy guidance and independent compliance oversight while helping Everway maintain a scalable and audit-ready privacy programme across evolving frameworks. The role is focused on privacy assurance, risk, governance and compliance . Legal retains responsibility for contractual privacy matters and legal advice, while business and data owners remain accountable for the data and processing activities within their areas. Main Responsibilities - Supporting the Director Compliance, to implement and deliver the privacy workstream of the compliance roadmap, ensuring the company meets its legal, regulatory and reputational responsibilities. - Support and lead specific workstreams within the Compliance roadmap and business improvement projects/initiatives, for example data mapping, risk management, controls testing and policy development. - Lead and coordinate Data Protection Impact Assessments (DPIAs) on products, systems, and processes, tracking risk treatments and embedding Privacy-by-Design from the outset. - Manage the framework for Data Subject Access Requests (DSARs) and Data Deletion Requests, ensuring robust processes with system owners to assure quality and timeliness. - Identify privacy risks and controls, translating them into practical business processes to improve organisational compliance and supporting incident management. - Address privacy-focused vendor security inquiries from customers and collaborate with Legal on related requests. - Maintain and enhance the Knowledge Base and Trust Centre resources to ensure up-to-date compliance documentation. - Conduct comprehensive internal Vendor Security Reviews to assess and mitigate third-party privacy risks. - Develop, implement and maintain internal privacy policies, external privacy notices, procedures and ELT/governance reporting including KPIs. - Lead privacy assurance activities supporting audit and certification initiatives (eg ISO 27701, ISO 27001, ISAE 3000, SOC 2) and manage central evidence within GRC tools. - Monitor regulatory developments, assist with regulator/auditor interactions, and liaise with external and internal legal counsel as applicable on cross-jurisdictional privacy matters.