Senior Manager, Privacy Program

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead, mentor, and nurture a team of privacy and technical governance experts.

• Establish OKRs, carry out performance evaluations, and promote ongoing operational enhancement.

• Merge privacy operations, such as DSARs and vendor assessments, with technical IT governance strategies.

• Create and track team KPIs, statutory privacy request timelines, technical control effectiveness, and framework adherence.

• Develop, implement, and manage the organization-wide privacy program, which includes governance frameworks, policies, standards, and procedures.

• Supervise data classification, Records of Processing Activities, and ongoing data-flow mapping.

• Provide guidance to Product Management and Engineering leadership on Privacy by Design principles.

• Manage privacy and data-security awareness initiatives.

• Oversee the comprehensive DSAR program and workflows for access, deletion, and correction requests.

• Lead responses to privacy incidents and data breaches, encompassing investigation, containment, remediation, and regulatory notification.

• Conduct vendor privacy risk evaluations and reviews of Data Processing Agreements.

• Manage the technical governance agenda in alignment with SOC 2, ISO 27001, and NIST standards.

• Advocate for automated control tracking and real-time evidence gathering utilizing cloud-based GRC platforms.

• Supervise technical policy procedures, attestations, and exception monitoring.

⛳️ Requirements

• Over 8 years of progressive experience in privacy, data protection, or IT Governance & Risk programs within regulated industries (Fintech, Financial Services, or SaaS).

• More than 3 years of direct management experience.

• Demonstrated success in recruiting, mentoring, and expanding governance, risk, or privacy teams.

• Extensive knowledge of GDPR and CCPA/CPRA regulations.

• Strong comprehension of SOC 2 Type II, ISO 27001, and NIST CSF frameworks.

• Familiarity with tools such as DataGrail, OneTrust, Transcend, Vanta, Drata, or LogicGate.

• Proficient in engineering principles related to development pipelines, cloud architecture, and access controls.

• Experience in transitioning assurance and control functions to proactive, automated, metrics-driven operations.

• Exceptional capability to convert complex legal and technical requirements into actionable business advice.

• Strong executive presence suitable for reporting to C-suite executives.

🏝️ Benefits

• Seven paid holidays sponsored by the company.

• Generous family leave policy.

• Front-loaded paid time off.

• Competitive 401(k) matching program.

• Health, dental, and vision insurance available for full-time employees.

• Bonus for taking five consecutive vacation days.

• Budget for food and groceries.

• Contribution towards health and wellness initiatives.

• Flexible working environment from fully remote to hybrid options.