Privacy Program Manager

Coursera; Toronto; On-site; CAD 78,400 - 98,000; Full time

Job summary

Coursera is seeking a Privacy Program Manager to operationalize the company's global privacy program across products and platforms. You will partner with Legal, Engineering, Product, Security, and Privacy teams to translate laws into scalable processes and controls.

You will own DPIAs, ROPAs, data subject rights workflows, and vendor privacy reviews, driving automation and governance while maintaining compliance across Coursera’s Canada operations.

Qualifications

• 5+ years of experience in privacy, data protection, compliance, or related program management function.
• Demonstrated experience translating privacy and data protection requirements, including GDPR and CCPA, into operational processes, policies, controls, guidance, or technical requirements in partnership with Legal, Engineering, Product, and Security teams.
• Experience implementing, administering, or optimizing a privacy management platform (such as OneTrust, TrustArc, or a comparable solution) to support privacy operations, workflow automation, and program governance.

Responsibilities

• Lead privacy program operations including privacy impact assessments (DPIAs), records of processing activities (ROPAs), vendor privacy reviews, and privacy compliance workflows, using privacy management tools and workflow automation where appropriate.
• Design, implement, and manage scalable processes for data subject rights requests and general privacy inquiries, partnering with Engineering and Support teams to improve efficiency while meeting regulatory deadlines.
• Partner with Product, Engineering, Security, Legal, Marketing, Procurement, and other stakeholders to conduct privacy reviews for new products, features, vendors, and business initiatives, embedding privacy by design into business processes.
• Develop and maintain privacy policies, standards, operational guidance, training, records, and self‑service resources that enable teams to manage routine privacy obligations independently, with clear escalation paths where appropriate.
• Monitor changes in global privacy laws and regulations, translating legal requirements into practical operational processes, controls, and guidance.
• Define and report on privacy program metrics, identify opportunities to improve operational efficiency, and support initiatives related to incident response, data retention, cross‑border data transfers, and broader privacy governance.

Skills

5+ years of privacy experience

GDPR/CCPA knowledge

Privacy program operations

OneTrust/TrustArc experience

Bachelor's degree or equivalent

CIPP/CIPM/CIPT certification

Education

Bachelor's degree (or equivalent)

Tools

OneTrust/TrustArc privacy platform

Job description

About Coursera

Coursera and Udemy are now one company, creating one of the world's most comprehensive skills development platforms for the AI era. This strengthens our ability to accelerate AI-powered innovation and shape how the world discovers and builds skills at a pivotal moment of change. Read more about the combined company by visiting our blog. Coursera was launched in 2012 by Andrew Ng and Daphne Koller with a mission to provide universal access to world‑class learning. Coursera partners with leading university and industry partners to offer a broad catalog of content and credentials, including courses, Specializations, Professional Certificates, and degrees. Coursera’s platform innovations — including AI‑powered personalized guide and features, like Role Play and Course Builder, and role‑based solutions like Skills Tracks — enable instructors, partners, and companies to deliver scalable, personalized, and verified learning. Institutions worldwide rely on Coursera to upskill and reskill their employees, students, and citizens in high‑demands fields such as GenAI, data science, technology, and business, while learners globally turn to Coursera to master the skills they need to advance their careers. Coursera is a Delaware public benefit corporation and a B Corp. Coursera recently combined with Udemy to create one of the world’s most comprehensive skills development platforms.

Why Join Us

At Coursera, we’re looking for inventors, innovators, and lifelong learners ready to shape the future of education. You’ll help build global programs and tools that power online learning for millions turning bold ideas into real impact. People who thrive here are customer‑first builders who move fast, simplify ruthlessly, and iterate relentlessly on the metrics that matter. We’re a globally distributed team that comes together intentionally for collaboration, complex problem‑solving, and key milestones — creating opportunities for teams to do their best work together. Our virtual hiring and onboarding experience makes it easy to join us and start making an impact from anywhere. If you’re ready to make a global impact, help scale unique products across Coursera + Udemy, and grow your career.

Job Overview

Legal and Compliance manages all legal and regulatory matters, including privacy, contracts, corporate governance, compliance, employment law, intellectual property, government relations, and claims, while supporting Coursera's and Udemy's platforms and partnerships. The Privacy Program Manager is responsible for operationalizing and scaling the company's global privacy program across products, platforms, and business functions. Working closely with Legal, Security, Engineering, Product, Marketing, and other cross‑functional partners, this role translates privacy and data protection requirements into scalable operational processes, governance, and technical controls that embed privacy by design across the organization. The role owns core privacy operations, including privacy impact assessments, records of processing activities, vendor privacy reviews, and data subject rights requests, while driving automation, self‑service capabilities, and continuous improvement to enable the business to meet privacy obligations efficiently at scale.

Responsibilities

• Lead and continuously improve core privacy program operations, including privacy impact assessments (DPIAs), records of processing activities (ROPAs), vendor privacy reviews, and privacy compliance workflows, using privacy management tools and workflow automation where appropriate.
• Design, implement, and manage scalable processes for data subject rights requests and general privacy inquiries, partnering with Engineering and Support teams to improve efficiency while meeting regulatory deadlines.
• Partner with Product, Engineering, Security, Legal, Marketing, Procurement, and other stakeholders to conduct privacy reviews for new products, features, vendors, and business initiatives, embedding privacy by design into business processes.
• Develop and maintain privacy policies, standards, operational guidance, training, records, and self‑service resources that enable teams to manage routine privacy obligations independently, with clear escalation paths where appropriate.
• Monitor changes in global privacy laws and regulations, translating legal requirements into practical operational processes, controls, and guidance.
• Define and report on privacy program metrics, identify opportunities to improve operational efficiency, and support initiatives related to incident response, data retention, cross‑border data transfers, and broader privacy governance.

Qualifications

• 5+ years of experience in privacy, data protection, compliance, or a related program management function.
• Demonstrated experience supporting a privacy program subject to the General Data Protection Regulation (GDPR) and one or more U.S. state privacy laws, such as the California Consumer Privacy Act (CCPA), within a multinational or complex organization.
• Demonstrated experience translating privacy and data protection requirements, including GDPR and CCPA, into operational processes, policies, controls, guidance, or technical requirements in partnership with Legal, Engineering, Product, and Security teams.
• Experience conducting operational privacy activities, including DPIAs, maintaining ROPAs, managing data subject rights requests, vendor privacy reviews, privacy due diligence, and privacy contract reviews.
• Experience implementing, administering, or optimizing a privacy management platform (such as OneTrust, TrustArc, or a comparable solution) to support privacy operations, workflow automation, and program governance.
• Bachelor's degree (or equivalent practical experience) and a Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), or equivalent privacy certification.

Nice to haves

• Experience working in a technology, software‑as‑a‑service (SaaS), or online education environment.
• Experience supporting privacy programs for artificial intelligence (AI) or machine learning products.
• Experience supporting compliance with additional global privacy laws, including APAC and Latin American privacy frameworks.
• Experience defining and reporting operational metrics, KPIs, or dashboards for privacy programs.
• Law degree or equivalent legal training.

Coursera offers competitive pay and fair compensation practices across all regions. Job titles may span multiple career levels, and the targeted hiring base salary range for this role in Canada is CAD 78,400 to CAD 98,000. Actual compensation will depend on factors such as experience, education, transferable skills, business needs, and location. This range may be adjusted over time and may include eligibility for variable pay, equity, and comprehensive benefits.

Keep Learning

If this opportunity interests you, you might like these courses on Coursera:

• Privacy Law and Data Protection
• Data Privacy, Security, Governance, Risk, and Compliance

For more information about how Coursera collects and uses your personal information, please see our Global Applicant Privacy Notice.

Coursera is an Equal Opportunity Employer committed to building a welcoming and inclusive workplace. We consider all qualified applicants without regard to legally protected characteristics and provide reasonable accommodations upon request at [e-mail].