Privacy Program Manager

About the role

In this role, you will translate privacy requirements into effective, repeatable processes across the company and drive the day-to-day operation of key privacy initiatives. Pro members see the company and apply now. It opens to everyone on November 7.

What you'll do

• Own and coordinate privacy compliance workflows across frameworks including GDPR, CCPA/CPRA, US state privacy laws, HIPAA, and applicable biometric privacy requirements.
• Manage privacy impact assessment processes, including Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), and assessments involving AI systems, biometric data, voice technologies, health...
• Partner with Product, Engineering, Legal, and Security teams to operationalize privacy-by-design throughout the product development lifecycle.
• Maintain data inventories, records of processing activities (RoPAs), data flow documentation, and other privacy governance records.
• Manage processes for data subject and consumer rights requests, including access, deletion, correction, and opt-out requests, and help ensure requests are handled consistently and within applicable deadlines.
• Partner with Security and Legal on third-party and vendor privacy assessments, data processing requirements, and privacy-related risk remediation.
• Support privacy incident response and regulatory or customer inquiries by coordinating documentation, stakeholders, timelines, and follow-up actions.

What they're looking for

• Excited by AI and emerging technologies and interested in solving novel privacy challenges involving voice, biometrics, health information, and other sensitive data.
• An exceptional program manager who can turn complex requirements into clear workstreams, owners, milestones, and measurable outcomes.
• Comfortable operating across Legal, Product, Engineering, Security, and commercial teams and able to communicate effectively with both technical and non-technical stakeholders.
• Highly organized and detail-oriented, while able to prioritize effectively and maintain momentum across multiple workstreams.
• Pragmatic and solutions-oriented, with a strong instinct for building processes that manage risk without creating unnecessary friction.
• Comfortable building programs and processes from the ground up in a fast-paced, high-growth environment.
• 6+ years of experience in privacy program management, privacy operations, data governance, compliance, or a related field, ideally within a technology, SaaS, or AI company.
• Demonstrated experience operationalizing privacy requirements under frameworks such as GDPR, CCPA/CPRA, and other US state privacy laws as well as sector specific frameworks such as HIPAA and biometric privacy...