Privacy Manager

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Implement Sezzle’s NIST Privacy Framework from roadmap to operational program, which includes profiles, gap analysis, costed action plans, and monitoring.

• Take ownership of privacy risk assessments and Privacy Impact Assessments for products, features, and third-party vendors.

• Coordinate a privacy intake and disposition process for proposals.

• Develop and sustain the enterprise data inventory and data map in collaboration with Engineering.

• Oversee the automation and fulfillment of consumer access, deletion, and opt-out requests.

• Administer de-identification and aggregation standards along with approval workflows.

• Collaborate with Engineering, Product, and Marketing to integrate privacy-by-design principles.

• Lead the cross-functional privacy working group.

• Maintain the decision log and obligations register, track metrics, and assist with executive and board-level reporting.

• Work alongside Information Security on privacy incidents and cross-border data transfer risks.

⛳️ Requirements

• 4+ years of focused experience in managing data privacy programs.

• Proven experience in establishing a privacy program or a significant component from inception to steady state.

• Practical experience in implementing a recognized privacy or security framework.

• Familiarity with profiles or maturity assessments, gap analyses, and action plans.

• Strong understanding of CCPA/CPRA and the wider US state privacy law landscape.

• Knowledgeable about TCPA, GLBA, PIPEDA, and Quebec Law 25.

• Proficient in de-identification, aggregation, and other privacy-enhancing techniques.

• Ability to influence both technical and non-technical stakeholders, lead a cross-functional working group, and present to executives.

• Capable of managing multiple high-stakes projects in a dynamic environment.

• Preferred: CIPM along with CIPP/US or CIPP/C; CIPT is an additional advantage.

• Preferred: familiarity with OneTrust, Securiti.ai, WireWheel, and data infrastructure analytics.

• Preferred: experience with financial regulations and compliance frameworks such as GLBA and PCI-DSS.

• Preferred: experience in a public company with audit committee or board-level reporting.

🏝️ Benefits

• Remote work.

• Opportunities for career advancement.

• Compensation ranging from $4,500 to $6,500 USD gross per month.