Job Description
We are seeking an experienced Privacy Manager to support privacy risk management and regulatory compliance across multiple business lines. The Privacy Manager will play a key role in evaluating privacy risks, reviewing Privacy Impact Assessments (PIAs), and ensuring business processes, products, services, and internal initiatives comply with applicable federal and state privacy laws and regulations.
Responsibilities
- Review and provide effective challenge and guidance on Privacy Impact Assessments (PIAs) to identify potential privacy risks and compliance gaps.
- Triage and respond to privacy-related inquiries from internal stakeholders across multiple business lines and departments.
- Conduct privacy reviews of existing business processes, new products and services, and internally developed applications that collect, store, or process personal information.
- Evaluate privacy assessment documentation and provide recommendations to ensure compliance with applicable regulatory requirements.
- Advise business stakeholders on privacy requirements, control development, monitoring activities, and risk mitigation strategies.
- Identify privacy compliance breakdowns and support remediation plans and corrective actions.
- Monitor changes in federal and state privacy laws and regulations and communicate their potential impact on business operations.
- Maintain privacy-related reporting, documentation, and tracking using Airtable.
- Collaborate with Legal, Compliance, Product, Engineering, and other cross-functional teams to address privacy concerns.
Experience
- Minimum of 4+ years of hands-on experience in privacy, compliance, risk management, audit, or monitoring and testing program management.
- Working knowledge of U.S. state privacy laws and regulations across 20+ states.
- Understanding of federal privacy-related regulations, including:
- Telephone Consumer Protection Act (TCPA)
- Gramm-Leach-Bliley Act (GLBA)
- CAN-SPAM Act
- Practical experience reviewing and evaluating Privacy Impact Assessments (PIAs) or similar privacy risk assessments.
- Mandatory hands-on experience with Airtable, particularly for reporting, tracking, and managing workflows.
Skillsets
- Privacy Laws
- TCPA/GLBA/CAN-SPAM
Education
- Bachelor's degree or equivalent experience in related field.