Note: The job is a remote job and is open to candidates in USA. The customer is a software and technology solutions organization seeking a Privacy Operations Manager to lead and operationalize a global privacy program. The role partners with Legal, Information Security, Product, IT, and business stakeholders to ensure compliance with global privacy regulations, implement scalable privacy frameworks, and drive privacy-by-design principles across products, services, and business functions.
Responsibilities
- Implement privacy policies, procedures, and operational frameworks
- Conduct or facilitate the conduct of risk assessments, including - privacy impact assessments (PIAs) data protection impact assessments (DPIAs), transfer impact assessments (TIAs)
- Coordinate responses to data subject access requests (DSARs) and ensure timely resolution
- Track and report on privacy program metrics and KPIs
- Track and report changes in new/existing privacy regulation and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others
- Build out and maintain data inventory, and data mapping initiatives
- Identify privacy risks and work with stakeholders to implement mitigation strategies
- Support privacy incident response and breach notification processes
- Conduct privacy audits and assessments of internal processes and third-party vendors
- Partner with Legal, Information Security, IT, Product, and Business teams to integrate privacy by design principles
- Serve as a privacy subject matter expert and advisor to business units
- Facilitate privacy training and awareness programs for employees
- Work with vendors and partners to ensure contractual privacy obligations are met
- Identify current sub-processor's and updating contractual documentation to reflect current state
- Maintain records of processing activities (ROPA) and privacy documentation
- Prepare privacy reports for leadership and relevant stakeholders
- Document privacy procedures and create operational playbooks
- Support regulatory inquiries and audits
Skills
- • Bachelor's degree in Law, Information Systems, Computer Science, Cybersecurity, or a related field
- • 6 to 8 years of experience in privacy, cybersecurity, compliance, or related functions, preferably within a SaaS or technology environment
- • 3 to 5 years of people management experience
- • Privacy certification such as CIPM, CIPP, CIPT, CISSP , or equivalent
- • Strong knowledge of global privacy regulations including GDPR, CCPA, PIPEDA, and related frameworks
- • Experience conducting privacy risk assessments and implementing privacy controls
- • Advanced experience configuring and managing OneTrust , including assessments, data inventory management, consent management, and DSAR workflows
- • Experience translating legal and regulatory requirements into operational and technical controls
- • Strong understanding of privacy-by-design principles and sensitive data processing requirements
- • Knowledge of data classification, retention, and lifecycle management
- • Proven success managing multiple projects and priorities in a large, complex organization
- • Excellent communication, stakeholder management, analytical, and problem-solving skills
- • Experience with Power BI, Power Automate, and AI-driven compliance solutions
- • Familiarity with data governance platforms, SIEM solutions, and Privacy Enhancing Technologies (PETs)
- • Expertise in privacy automation tools and workflow optimization
- • Scripting or automation experience for compliance operations
- • Knowledge of information security frameworks and best practices
- • Project management certification or equivalent experience
- • Master's degree, legal studies background, or law degree preferred
Benefits
- Remote work arrangement
- Access to Elevate's curated training suite to enhance and develop skills
- Hands-on support
- Networking opportunities
- Access to up-to-date resources
- Opportunities to work with law firms and law department customers worldwide
Company Overview