Non-Eng Template

Overview

The organization is seeking an experienced Privacy Program Manager to join the Legal Team and help build and scale its global privacy program. In this role, you will translate privacy requirements into effective, repeatable processes across the organization and drive the day-to-day operation of key privacy initiatives.

You will work closely with Legal, Product, Engineering, Security, Safety, and go-to-market teams to operationalize privacy-by-design, manage privacy assessments and compliance workflows, and strengthen the systems and processes that support a growing global business.

Responsibilities

• Manage and continuously improve the global privacy program by translating legal and regulatory requirements into scalable operational processes and controls.
• Own and coordinate privacy compliance workflows across frameworks including GDPR, CCPA/CPRA, US state privacy laws, HIPAA, and applicable biometric privacy requirements.
• Manage privacy impact assessment processes, including Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), and assessments involving AI systems, biometric data, voice technologies, health information, and other sensitive data.
• Partner with Product, Engineering, Legal, and Security teams to operationalize privacy-by-design throughout the product development lifecycle.
• Maintain data inventories, records of processing activities (RoPAs), data flow documentation, and other privacy governance records.
• Manage processes for data subject and consumer rights requests (access, deletion, correction, and opt-out) and ensure requests are handled consistently and within applicable deadlines.
• Partner with Security and Legal on third-party and vendor privacy assessments, data processing requirements, and privacy-related risk remediation.
• Support privacy incident response and regulatory or customer inquiries by coordinating documentation, stakeholders, timelines, and follow-up actions.
• Implement and administer privacy tooling and automation to improve efficiency and scalability of privacy operations, including maintaining a consent management platform.
• Partner with Legal, Marketing, Product, and Engineering to ensure cookie, tracking technology, and other consent and preference mechanisms are appropriately configured, documented, monitored, and updated as products and regulatory requirements evolve.
• Develop privacy program metrics, dashboards, and reporting to track compliance, identify risks, and communicate program maturity and priorities to stakeholders.
• Develop and maintain privacy policies, procedures, playbooks, templates, and internal guidance.
• Coordinate privacy training and awareness initiatives across the organization.

Requirements

• 6+ years of experience in privacy program management, privacy operations, data governance, compliance, or a related field, ideally within a technology, SaaS, or AI company.
• Demonstrated experience operationalizing privacy requirements under frameworks such as GDPR, CCPA/CPRA, and other US state privacy laws, as well as sector-specific frameworks such as HIPAA and biometric privacy requirements.
• Technical mindset: ability to read a data flow diagram, understand system architectures and keys to data handling, and translate between legal requirements and engineering implementation.
• Experience building or significantly improving privacy review processes, privacy impact assessments, or privacy control frameworks.
• Hands-on experience managing consent management platforms and cookie/tracking technology compliance, including consent configuration, preference management, and coordination with technical and marketing teams.
• Familiarity with security and privacy frameworks such as SOC 2, ISO 27001, or similar.
• Experience integrating privacy requirements into cross-functional workflows with Legal, Product, Engineering, Security, and commercial stakeholders.
• Excellent project management, communication, stakeholder management, and problem-solving skills.

Preferred Qualifications

• Privacy certifications such as CIPP/US, CIPP/E, CIPM, or CIPT.

Compensation & Benefits

• Annual discretionary stipend for learning & development.
• Annual discretionary stipend for social travel to meet up with colleagues each year.
• Annual company offsite (past offsites have included Croatia and Italy).
• Monthly co-working stipend if not located near one of the main hubs.

Location

This role is remote and can be executed in the United States. The organization has a strong preference for the Eastern time zone, ideally New York.

Equal Opportunity

The organization is an equal opportunity employer and does not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses.