Senior Manager, Privacy

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the creation, execution, and ongoing enhancement of the enterprise privacy program and governance framework.

• Act as the privacy subject matter expert and a trusted advisor for the organization.

• Formulate and sustain privacy policies, standards, procedures, and controls.

• Execute privacy risk assessments for operations, systems, products, and initiatives.

• Collaborate with Information Technology, Information Security, Compliance, Legal, Internal Audit, Product, Operations, and business stakeholders.

• Design and implement processes for privacy monitoring, reporting, and incident management.

• Lead inquiries into privacy concerns, data handling practices, and possible privacy incidents.

• Propose recommendations to mitigate privacy risks and enhance privacy controls.

• Establish privacy metrics, reporting frameworks, and dashboards for leadership.

• Assist with external audits, assessments, and regulatory reviews.

• Support SOC 2 and other compliance readiness efforts.

• Collaborate with Internal Audit, Risk Management, and Compliance to reinforce controls.

• Create and deliver privacy awareness training and educational initiatives.

• Stay updated on changes in privacy regulations, emerging risks, and industry trends.

• Enhance privacy processes, governance, reporting, and risk management capabilities.

• Aid in the evaluation and implementation of GRC tools and privacy management technologies.

• Work with leadership on strategic privacy initiatives.

⛳️ Requirements

• Bachelor's degree in Information Security, Information Systems, Cybersecurity, Business Administration, Risk Management, Legal Studies, Compliance, or a related field.

• Equivalent professional experience may be accepted in place of formal education.

• At least 8–10 years of progressive experience in privacy, compliance, risk management, information security, audit, governance, or related fields.

• Demonstrated experience in designing, implementing, or managing enterprise privacy programs and governance frameworks.

• Experience in conducting privacy risk assessments and formulating privacy control strategies.

• Comprehensive knowledge of federal, state, and industry privacy and data protection laws, regulations, and standards.

• Experience in supporting audits, assessments, and compliance reviews.

• Proven ability to work cross-functionally with technology, legal, compliance, risk, and operational business partners.

• Preferred: familiarity with FERPA, HIPAA, CCPA, COPPA, PPRA, and other privacy requirements.

• Preferred: experience in supporting data governance, cybersecurity, risk management, or compliance initiatives.

• Preferred: experience in aiding SOC 2 readiness initiatives.

• Preferred: experience in evaluating or implementing GRC tools and privacy management technologies.

• Preferred: professional certifications such as CIPP, CIPM, CIPT, CISSP, CRISC, or related certifications.

• In-depth knowledge of privacy governance, privacy frameworks, and relevant privacy regulations.

• Strong understanding of risk management, compliance, internal controls, and regulatory requirements.

• Ability to assess complex privacy risks and devise mitigation strategies.

• Excellent project management and organizational skills.

• Capability to develop scalable processes, controls, and governance structures.

• Experience in creating metrics, dashboards, and reporting frameworks.

• Ability to manage multiple priorities in a fast-paced environment.

• Must be able to lift up to fifteen (15) pounds.

• Frequent use of telephone, computer, and printer.

🏝️ Benefits

• Indoor home work performed in a standard office environment.

• Opportunity to contribute to organizational growth and operational excellence.

• Privacy awareness training and educational initiatives.

• Collaboration with cross-functional teams and visibility into program performance for leadership.