Note: The job is a remote job and is open to candidates in USA. Nanit is a high-growth baby technology company developing connected parenting products, including advanced baby monitors. The Privacy & Security Program Manager will lead and evolve the company’s privacy and security compliance program by developing policies, managing risk and vendor programs, supporting incident response, and embedding privacy and security practices across the organization.
Responsibilities
- Develop, maintain and implement Nanit's privacy and security policies, standards and processes to ensure compliance with applicable laws, regulations and industry frameworks (e.g., CCPA/CPRA and other U.S. state privacy laws, GDPR, COPPA, and relevant security frameworks such as SOC 2, ISO 27001)
- Conduct and support regular privacy and security risk assessments, audits and gap analyses across systems, vendors, products and business processes, and drive remediation of identified gaps
- Collaborate with stakeholders across the organization to assess AI-related privacy, security and compliance risks
- Manage the third-party/vendor risk management program, including privacy and security due diligence, contract review support, ongoing monitoring, and enforcement of Nanit's data protection requirements
- Partner with Product and Engineering teams to embed privacy-by-design and security-by-design principles into new features and products, including data mapping, privacy impact assessments (PIAs/DPIAs), and secure development practices
- Monitor emerging privacy and security regulatory developments and industry standards, and advise the Chief Legal & Administrative Officer and Chief Technology Officer and other business stakeholders on impact and required action
- Lead the company's response to security and privacy inquiries from customers, partners and regulators, including questionnaires, audits and due diligence requests
- Support incident response efforts for privacy and security incidents, including investigation, documentation, remediation tracking and stakeholder communication
- Develop and deliver privacy and security metrics, dashboards and reporting for senior management and, as needed, the board of directors
- Design and deliver company-wide training and awareness programs on privacy, data security and compliance best practices
- Act as a thoughtful business partner who supports a fast-moving culture, flexible teamwork, and pragmatic, scalable solutions that support growth while protecting the company
Skills
- Bachelor's degree in a related field
- 5+ years of experience in privacy program management, information security, or a related compliance function, ideally spanning both in-house and cross-functional environments
- Hands-on experience supporting or operating privacy and/or security programs aligned to frameworks such as SOC 2, ISO 27001/27701, NIST CSF, or similar
- Working knowledge of consumer privacy laws (e.g., CCPA/CPRA, GDPR, COPPA) and a willingness to build deeper subject-matter expertise over time
- Practical experience with, or exposure to, security incident response, vendor risk management, and identity/access management concepts across on-premise and cloud environments
- Able to rapidly interpret relevant laws, regulations and technical requirements, and translate them into practical, actionable and business-friendly guidance
- Excellent stakeholder management, communication and collaboration skills; able to explain complex privacy/security concepts to both technical and non-technical audiences
- Strong organizational skills, a problem-solving mindset, attention to detail, and the ability to exercise sound judgment in ambiguous environments
- Strong technical orientation with an understanding of modern cloud architectures and data flows, and the ability to leverage emerging technologies and AI-powered tools to strengthen privacy, security and compliance programs
- Relevant certifications (e.g., CIPP, CIPM, CISSP, CIPT, CISM)
Benefits
- Hybrid in office schedule
- Remote work from home month in August
- Flexible PTO (we trust you to take the time you need)
- Equity options so you can share in our growth
- Paid parental leave for all new parents
- Employee discounts on Nanit products
- Work from home stipend
- Monthly team events
- Access to healthcare benefits
- A 401(k) plan
- Short-term and long-term disability coverage
- Basic life insurance
Company Overview