Senior Manager, Privacy

• Lead the development, implementation, and continuous enhancement of the enterprise privacy program and governance framework
• Serve as the organization's privacy subject matter expert and trusted advisor
• Develop and maintain privacy policies, standards, procedures, and controls
• Conduct privacy risk assessments for operations, systems, products, and initiatives
• Partner with Information Technology, Information Security, Compliance, Legal, Internal Audit, Product, Operations, and business stakeholders
• Develop and implement privacy monitoring, reporting, and incident management processes
• Lead investigations into privacy concerns, data handling practices, and potential privacy incidents
• Develop recommendations to mitigate privacy risks and improve privacy controls
• Establish privacy metrics, reporting mechanisms, and dashboards for leadership
• Support external audits, assessments, and regulatory reviews
• Assist with SOC 2 and other compliance readiness initiatives
• Collaborate with Internal Audit, Risk Management, and Compliance to strengthen controls
• Develop and deliver privacy awareness training and educational initiatives
• Monitor changes in privacy regulations, emerging risks, and industry trends
• Improve privacy processes, governance, reporting, and risk management capabilities
• Support evaluation and implementation of GRC tools and privacy management technologies
• Partner with leadership on strategic privacy initiatives

Requirements

• Bachelor's degree in Information Security, Information Systems, Cybersecurity, Business Administration, Risk Management, Legal Studies, Compliance, or a related field
• Equivalent professional experience may be considered in lieu of formal education
• Minimum of 8–10 years of progressive experience in privacy, compliance, risk management, information security, audit, governance, or related disciplines
• Proven experience designing, implementing, or managing enterprise privacy programs and privacy governance frameworks
• Experience conducting privacy risk assessments and developing privacy control strategies
• Strong knowledge of federal, state, and industry privacy and data protection laws, regulations, and standards
• Experience supporting audits, assessments, and compliance reviews
• Experience working cross-functionally with technology, legal, compliance, risk, and operational business partners
• Preferred: experience with FERPA, HIPAA, CCPA, COPPA, PPRA, and other privacy requirements
• Preferred: experience supporting data governance, cybersecurity, risk management, or compliance initiatives
• Preferred: experience supporting SOC 2 readiness initiatives
• Preferred: experience evaluating or implementing GRC tools and privacy management technologies
• Preferred: professional certifications such as CIPP, CIPM, CIPT, CISSP, CRISC, or related certifications
• Deep knowledge of privacy governance, privacy frameworks, and applicable privacy regulations
• Strong understanding of risk management, compliance internal controls, and regulatory requirements
• Ability to assess complex privacy risks and develop mitigation strategies
• Strong project management and organizational skills
• Ability to develop scalable processes, controls, and governance structures
• Experience developing metrics, dashboards, and reporting mechanisms
• Ability to manage multiple priorities in a fast-paced environment
• Must be able to lift up to fifteen (15) pounds
• Frequent use of telephone, computer, and printer

Core Competencies

Demonstrates expertise in developing and managing enterprise privacy programs, governance frameworks, and compliance initiatives. Proficient in conducting privacy risk assessments, implementing privacy controls, and ensuring adherence to privacy regulations and standards.

Highest-signal resume keywords

• Enterprise Privacy Program Management
• Privacy Risk Assessment
• Privacy Governance Frameworks
• Compliance Audits and Reviews
• Privacy Regulations Knowledge

Hard Skills

• Privacy Policy Development
• Privacy Control Strategies
• Data Protection Laws
• Risk Management
• Metrics and Reporting Mechanisms
• Incident Management Processes
• Privacy Monitoring
• Privacy Awareness Training
• GRC Tools Implementation
• Privacy Frameworks

Soft Skills

• Project Management
• Organizational Skills
• Cross-Functional Collaboration
• Strategic Initiative Support
• Complex Problem Solving

Certifications & Qualifications

• CIPP
• CIPM
• CIPT
• CISSP
• CRISC

Industry Keywords

• FERPA
• HIPAA
• CCPA
• COPPA
• PPRA
• Compliance
• Information Security
• Risk Management
• Data Governance
• Privacy Standards

Tools & Technologies

• GRC Tools
• Privacy Management Technologies
• Incident Management Systems
• Reporting Dashboards
• Privacy Monitoring Tools