Privacy Manager

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Lead the implementation of the NIST Privacy Framework at Sezzle, transitioning from roadmap development to operational execution.

• Create Current and Target Profiles, conduct gap analyses, formulate prioritized and budgeted action plans, and ensure ongoing monitoring.

• Oversee privacy risk assessments and Privacy Impact Assessments for products, features, and third-party vendors.

• Manage an intake and disposition process for privacy-related proposals.

• Construct and sustain the enterprise data inventory and data mapping in collaboration with the Engineering team.

• Handle automation and fulfillment of consumer requests for access, deletion, and opt-out options.

• Administer standards for de-identification and aggregation, along with approval workflows.

• Collaborate with Engineering, Product, and Marketing teams to integrate privacy by design principles.

• Facilitate the cross-functional privacy working group.

• Keep a decision log and obligations register, monitor metrics, and assist with executive and board-level reporting.

• Work alongside the Information Security team on privacy incidents and risks associated with cross-border data transfers.

⛳️ Requirements

• Minimum of 4 years of focused experience in managing data privacy programs.

• Proven experience in establishing at least one privacy program or a significant component from initial development to a stable state.

• Practical experience in implementing a recognized privacy or security framework; preference for the NIST Privacy Framework, with NIST CSF or ISO 27701 also applicable.

• Comprehensive understanding of CCPA/CPRA, US state privacy laws, TCPA, GLBA, PIPEDA, and Quebec Law 25.

• Proficiency in de-identification, aggregation, and other privacy-enhancing techniques.

• Capability to influence both technical and non-technical stakeholders, lead a cross-functional working group, and present effectively to executives.

• Ability to juggle multiple high-stakes projects in a dynamic environment.

• CIPM certification plus CIPP/US or CIPP/C preferred; CIPT certification is a bonus.

• Familiarity with privacy technology platforms such as OneTrust, Securiti.ai, and WireWheel.

• Experience with financial regulations and compliance frameworks like GLBA and PCI-DSS is preferred.

• Experience in a public company setting and with board-level reporting is preferred.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Flexible work hours and remote work opportunities.

• Professional development and training programs.

• Competitive salary and performance bonuses.

• Collaborative and inclusive company culture.