Senior Privacy & Compliance Program Manager
$100,000–$125,000 year
RemoteUnited States or Canada
Job Summary
Coordinate MZLA's privacy and compliance program work, including program planning, recurring reviews, risk tracking, documentation, and leadership reporting. Translate privacy, security, and compliance requirements into practical processes that fit MZLA's products, infrastructure, support workflows, vendor ecosystem, and operating model. Coordinate vendor and tool reviews, working with legal, engineering, product, support, finance, operations, and other stakeholders to identify and document data flows, subprocessors, privacy, security, contractual, and operational considerations. Support privacy operations and data governance for a global user base, including DSAR and privacy-rights workflows, records of processing, retention practices, privacy policy maintenance, international privacy considerations, and related documentation. Help develop and maintain practical data inventories and data maps that document what data MZLA collects, where it is stored, how it is used, which vendors or systems are involved, and applicable retention practices. Partner with technical teams to support privacy-by-design practices and help ensure that new products, services, tools, and data-processing activities are reviewed early and appropriately. Support compliance and audit-readiness efforts, including ISO-related readiness, policy adoption, evidence tracking, control implementation, access reviews, training, and remediation follow-up. Help establish recurring review practices for vendors, tools, systems, policies, and data-processing activities to ensure documentation remains current as products and operations evolve. Help strengthen incident response readiness by clarifying roles, escalation paths, documentation expectations, and coordination across Legal, Infrastructure, leadership, and other relevant teams. Build lightweight guidance, checklists, templates, and training materials that help teams meet privacy and compliance expectations without creating unnecessary bureaucracy. This role requires regular overlap with Eastern Time working hours for meetings, collaboration, and time-sensitive coordination.
Required Qualifications
- 8+ years of relevant professional experience
- preferably within a software, SaaS, technology, or technical product environment
- 5+ years of direct or closely related hands-on experience in privacy operations, compliance program management, GRC, legal operations, security compliance, vendor governance, data governance, or a similar function
- Experience coordinating cross-functional programs across legal, engineering, product, support, finance, and operations teams
- Experience coordinating work with external counsel, advisors, auditors, consultants, or vendors
- Experience supporting vendor, tool, or subprocessor reviews
- Experience supporting privacy operations, data governance, or user-rights workflows
- Experience supporting products or services with international users
- Experience supporting GDPR or EU privacy requirements
- Experience supporting DSARs
- Experience supporting deletion or export requests
- Experience supporting data inventories
- Experience supporting records of processing
- Experience supporting retention practices
- Experience supporting access controls
- Experience supporting privacy policy maintenance
- Technical fluency
- ability to work with technical teams
- ability to understand how data moves through systems
- Familiarity with cloud services
- Familiarity with vendor tools
- Familiarity with support systems
- Familiarity with logs
- Familiarity with telemetry
- Familiarity with authentication
- Familiarity with access permissions
- Familiarity with data storage
- Familiarity with incident response
- Familiarity with breach readiness
- Familiarity with security/privacy escalation processes
- Strong project and program management skills
- excellent written communication
- sound judgment
- ability to build pragmatic, right-sized processes
- Ability to learn, evaluate, and responsibly use emerging technologies
- Ability to operate with initiative
- Ability to identify stakeholders
- Ability to propose next steps
- Ability to clarify ownership
- Ability to know when to escalate
- regular overlap with Eastern Time working hours
- ability to consistently maintain meaningful overlap with ET
- Ability to collaborate across time zones
- Ability to collaborate across disciplines
- Ability to communicate through video meetings
- Ability to use shared documents
- Ability to use issue trackers
- Ability to communicate asynchronously
- Applicants must reside in and have permanent work authorization for the country location(s) specified in the posting
- We are unable to consider applicants outside of these markets at this time
- we do not provide visa sponsorship
Desired Qualifications
- Bonus points for Experience supporting ISO 27001 readiness
- Bonus points for SOC 2 readiness
- Bonus points for audits
- Bonus points for certifications
- Bonus points for similar compliance efforts
- Experience working in an open-source organization
- Experience working in consumer software
- Experience working in communications
- Experience working in email
- Experience working in privacy-focused technology
- Experience working in mission-driven technology
- Experience working in a technology organization
- Experience developing training materials
- Experience developing enablement materials
- Experience developing materials for privacy
- Experience developing materials for security
- Experience developing materials for compliance
- Experience developing materials for vendor review
- Experience developing materials for data handling
- Experience with GRC platforms
- Experience with policy management tools
- Experience with ticketing systems
- Experience with vendor management tools
- Experience with other systems used to track compliance workflows
- Privacy certification such as CIPP/E
- Privacy certification such as CIPP/US
- Privacy certification such as CIPM
- Privacy certification such as similar
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.