Privacy Program Manager

This is a fully remote position, open to applicants in New York.

📋 Description

• Oversee and enhance ElevenLabs’ worldwide privacy initiative.

• Convert legal and regulatory obligations into scalable operational procedures and controls.

• Own and manage privacy compliance workflows across GDPR, CCPA/CPRA, US state privacy laws, HIPAA, and biometric privacy standards.

• Supervise PIAs, DPIAs, and assessments related to AI systems, biometric data, voice technologies, health information, and other sensitive information.

• Collaborate with Product, Engineering, Legal, and Security teams to implement privacy-by-design practices during product development.

• Maintain data inventories, records of processing activities, data flow documentation, and privacy governance records.

• Handle data subject and consumer rights requests, including access, deletion, correction, and opt-out inquiries.

• Organize third-party and vendor privacy evaluations, data processing requirements, and privacy risk mitigation strategies.

• Assist in privacy incident response and address regulatory or customer inquiries.

• Implement and manage privacy tools and automation, including the consent management platform.

• Coordinate cookie and tracking technology initiatives, along with consent and preference mechanisms, in collaboration with Legal, Marketing, Product, and Engineering teams.

• Create privacy metrics, dashboards, and reporting tools.

• Develop and sustain privacy policies, procedures, playbooks, templates, and internal guidance.

• Facilitate privacy training and awareness programs.

⛳️ Requirements

• A minimum of 6 years of experience in privacy program management, privacy operations, data governance, compliance, or a related field.

• Ideal experience within a technology, SaaS, or AI organization.

• Proven experience in implementing privacy requirements under GDPR, CCPA/CPRA, other US state privacy laws, HIPAA, and biometric privacy standards.

• Capability to interpret data flow diagrams and comprehend system architectures and data management.

• Ability to translate legal obligations into engineering solutions.

• Experience in creating or significantly enhancing privacy review workflows, privacy impact assessments, or privacy control frameworks.

• Practical experience in managing consent management platforms and ensuring compliance with cookie/tracking technologies.

• Familiarity with consent configuration, preference management, and collaboration with technical and marketing teams.

• Knowledge of SOC 2, ISO 27001, or comparable security and privacy frameworks.

• Strong project management, communication, stakeholder management, and problem-solving capabilities.

• Privacy certifications such as CIPP/US, CIPP/E, CIPM, or CIPT are advantageous.

🏝️ Benefits

• Annual discretionary professional development stipend.

• Annual discretionary stipend for social travel to connect with colleagues.

• Annual team offsite in a different location each year.

• Monthly co-working stipend for those not located near a primary hub.

• Flexible remote work options.

• Global team atmosphere.

• Opportunities for growth and support for learning and development.