Privacy Manager

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Lead the execution of Sezzle’s adaptation of the NIST Privacy Framework, progressing from the roadmap to an operational program, including Current and Target Profiles, gap analysis, prioritized and costed action plans, and continuous monitoring.

• Take ownership of privacy risk assessments and Privacy Impact Assessments for new products, features, and third-party vendors.

• Manage an intake and disposition process for privacy evaluations.

• Develop and sustain the enterprise data inventory and data map in collaboration with Engineering.

• Oversee the lifecycle management of consumer information.

• Handle automation and fulfillment of consumer access, deletion, and opt-out requests.

• Administer the standard and approval workflow for de-identification and aggregation.

• Collaborate with Engineering, Product, and Marketing teams to integrate privacy-by-design principles.

• Facilitate the cross-functional privacy working group.

• Maintain the decision log and obligations register.

• Monitor program metrics and assist with reporting to executives and the board.

• Partner with Information Security to manage, investigate, and address privacy incidents and cross-border data transfer risks.

⛳️ Requirements

• A minimum of 4 years of experience specifically managing data privacy programs.

• Proven experience in establishing at least one privacy program or significant component from initiation to a stable phase.

• Practical experience in implementing a recognized privacy or security framework; NIST Privacy Framework is highly preferred, along with NIST CSF or ISO 27701 as relevant alternatives.

• In-depth knowledge of CCPA/CPRA, US state privacy laws, TCPA, GLBA, PIPEDA, and Quebec Law 25.

• Proficient understanding of de-identification, aggregation, and other privacy-enhancing methodologies.

• Capability to convert complex legal requirements into actionable business processes.

• Ability to influence both technical and non-technical stakeholders, facilitate cross-functional working groups, and present findings to executives.

• Skilled in managing multiple high-priority projects in a fast-paced environment.

• CIPM plus CIPP/US or CIPP/C is preferred; CIPT is a plus.

• Familiarity with OneTrust, Securiti.ai, WireWheel, and data infrastructure analytics is preferred.

• Experience with financial regulations and compliance frameworks such as GLBA and PCI-DSS is preferred.

• Experience in a public company setting and board-level reporting is preferred.

🏝️ Benefits

• Remote work options available.

• Opportunities for career advancement.

• Competitive compensation ranging from $4,500 to $6,500 USD gross per month.