Senior Manager, Privacy (Legal)

Overview

This role supports privacy compliance across the US by advancing the organization’s data privacy program through strategic oversight, operational execution, and cross-functional collaboration. The Senior Manager, Privacy (Legal) will help ensure responsible use of data to support business objectives, while identifying and mitigating privacy risks.

Responsibilities

• Support day-to-day operations of the privacy program, including policy implementation, training, and awareness initiatives.
• Serve as a subject matter expert on privacy impact assessments (PIAs), records of processing activities, and vendor risk assessments.
• Ensure timely completion of PIAs, including providing business guidance on when and how to complete them.
• Review completed PIAs to identify risks, recommend mitigations, and support privacy by design.
• Maintain records of processing activities (RoPAs) and data maps.
• Oversee privacy risk assessments for vendors and other third parties.
• Develop training and workflows for privacy assessments and RoPAs.
• Maintain the Privacy Intranet and related guidance documents for business teams.
• Manage privacy technology platforms (e.g., OneTrust) and lead issue resolution, integration, and optimization.
• Develop and track privacy program metrics to identify trends, measure effectiveness, and drive improvement.
• Support the implementation and ongoing enhancement of processes and procedures to mitigate identified and potential privacy risks.
• Support the development and maintenance of the internal U.S. Privacy Network.
• Perform other duties as assigned by the manager or department leader.

Requirements

• BA degree required. JD degree from an accredited law school is preferred.
• BA degree with 7+ years or JD with 6+ years of privacy experience supporting business functions on data privacy PIAs, RoPAs, and vendor risk assessments.
• In-depth knowledge of U.S. privacy laws and requirements. Knowledge of GDPR and Canadian privacy laws and regulations is a plus.
• AI literacy and experience using technology to enhance privacy operations.
• Expert proficiency with common privacy compliance tools (e.g., OneTrust).
• Ability to work independently and respond to shifting priorities.
• Strong communication, project management, and presentation skills.
• Proven ability to collaborate effectively with cross-functional partners.
• Proven track record of assessing risk and developing privacy legal and compliance strategies to minimize and manage risk.
• Experience supporting clients within the life sciences or a similar industry focused on data privacy and security is required.
• CIPP/US privacy certification is a plus.

Preferred Qualifications

• JD from an accredited law school.
• CIPP/US privacy certification.
• Knowledge of GDPR and Canadian privacy laws and regulations.

Compensation & Benefits

• Salary Range: $160–$180k.
• Pay within the posted range will be based on relevant education, qualifications, certifications, experience, skills, geographic location, performance, and business or organizational needs.
• The organization may ultimately pay more or less than the posted range, and the range may be modified in the future.
• Eligible for Short-Term and Long-Term incentive programs.
• Competitive and comprehensive benefits package, including:
  • Medical, dental, vision
  • Flexible time off (unlimited sick time and flex time, and does not accrue time off)
  • 401(k)
  • Life and disability insurance
  • Recognition programs
  • (All benefits are subject to eligibility requirements.)

Location

• Remote within the US.
• Boston-based preferred.
• Minimal travel as required.

Additional Information

• Contract type: Full-time Employment / Unlimited.
• Job Requisition ID: 12153.
• Date posted: Aug 27, 2026.