Senior Manager, Privacy

Jobtailor; Deutschland; Remote; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Jobtailor seeks an experienced privacy leader to drive the enterprise privacy program and governance framework. You will act as the privacy SME, advising across IT, Security, Compliance, Legal, and business units to ensure compliant data handling and risk management.

You will develop policies, controls, and metrics, while leading investigations and readiness for SOC 2 and other regulatory reviews. Strong collaboration and policy development skills are essential.

Qualifikationen

• Bachelor's degree or equivalent in information security, privacy, risk management, or related field.
• Minimum 8–10 years of progressive experience in privacy, compliance, risk management, or governance.
• Proven experience designing or managing enterprise privacy programs and governance frameworks.
• Experience conducting privacy risk assessments and developing control strategies.
• Strong knowledge of privacy laws and industry standards (FERPA, HIPAA, CCPA, COPPA, PPRA).

Aufgaben

• Lead development and enhancement of the enterprise privacy program and governance framework.
• Serve as privacy SME and trusted advisor across the organization.
• Develop and maintain privacy policies, standards, and controls.
• Conduct privacy risk assessments for operations, systems, products, and initiatives.
• Partner with IT, Security, Compliance, Legal, Internal Audit, Product, and business stakeholders.
• Develop privacy monitoring, reporting, and incident management processes.
• Lead investigations into privacy concerns and data handling practices.
• Develop recommendations to mitigate privacy risks and improve controls.
• Establish privacy metrics, dashboards, and leadership reporting.
• Support external audits, assessments, and regulatory reviews (SOC 2 readiness).

Kenntnisse

Enterprise Privacy Program Management

Privacy Risk Assessment

Privacy Governance Frameworks

Cross-Functional Collaboration

Policy Development & Controls

Ausbildung

Bachelor's degree in Information Security/Privacy/Related field

Equivalent professional experience

Tools

GRC Tools

Privacy Management Technologies

Incident Management Systems

Reporting Dashboards

Privacy Monitoring Tools

Jobbeschreibung

• Lead the development, implementation, and continuous enhancement of the enterprise privacy program and governance framework
• Serve as the organization's privacy subject matter expert and trusted advisor
• Develop and maintain privacy policies, standards, procedures, and controls
• Conduct privacy risk assessments for operations, systems, products, and initiatives
• Partner with Information Technology, Information Security, Compliance, Legal, Internal Audit, Product, Operations, and business stakeholders
• Develop and implement privacy monitoring, reporting, and incident management processes
• Lead investigations into privacy concerns, data handling practices, and potential privacy incidents
• Develop recommendations to mitigate privacy risks and improve privacy controls
• Establish privacy metrics, reporting mechanisms, and dashboards for leadership
• Support external audits, assessments, and regulatory reviews
• Assist with SOC 2 and other compliance readiness initiatives
• Collaborate with Internal Audit, Risk Management, and Compliance to strengthen controls
• Develop and deliver privacy awareness training and educational initiatives
• Monitor changes in privacy regulations, emerging risks, and industry trends
• Improve privacy processes, governance, reporting, and risk management capabilities
• Support evaluation and implementation of GRC tools and privacy management technologies
• Partner with leadership on strategic privacy initiatives

Requirements

• Bachelor's degree in Information Security, Information Systems, Cybersecurity, Business Administration, Risk Management, Legal Studies, Compliance, or a related field
• Equivalent professional experience may be considered in lieu of formal education
• Minimum of 8–10 years of progressive experience in privacy, compliance, risk management, information security, audit, governance, or related disciplines
• Proven experience designing, implementing, or managing enterprise privacy programs and privacy governance frameworks
• Experience conducting privacy risk assessments and developing privacy control strategies
• Strong knowledge of federal, state, and industry privacy and data protection laws, regulations, and standards
• Experience supporting audits, assessments, and compliance reviews
• Experience working cross-functionally with technology, legal, compliance, risk, and operational business partners
• Preferred: experience with FERPA, HIPAA, CCPA, COPPA, PPRA, and other privacy requirements
• Preferred: experience supporting data governance, cybersecurity, risk management, or compliance initiatives
• Preferred: experience supporting SOC 2 readiness initiatives
• Preferred: experience evaluating or implementing GRC tools and privacy management technologies
• Preferred: professional certifications such as CIPP, CIPM, CIPT, CISSP, CRISC, or related certifications
• Deep knowledge of privacy governance, privacy frameworks, and applicable privacy regulations
• Strong understanding of risk management, compliance internal controls, and regulatory requirements
• Ability to assess complex privacy risks and develop mitigation strategies
• Strong project management and organizational skills
• Ability to develop scalable processes, controls, and governance structures
• Experience developing metrics, dashboards, and reporting mechanisms
• Ability to manage multiple priorities in a fast-paced environment
• Must be able to lift up to fifteen (15) pounds
• Frequent use of telephone, computer, and printer

Core Competencies

Demonstrates expertise in developing and managing enterprise privacy programs, governance frameworks, and compliance initiatives. Proficient in conducting privacy risk assessments, implementing privacy controls, and ensuring adherence to privacy regulations and standards.

Highest-signal resume keywords

• Enterprise Privacy Program Management
• Privacy Risk Assessment
• Privacy Governance Frameworks
• Compliance Audits and Reviews
• Privacy Regulations Knowledge

Hard Skills

• Privacy Policy Development
• Privacy Control Strategies
• Data Protection Laws
• Risk Management
• Metrics and Reporting Mechanisms
• Incident Management Processes
• Privacy Monitoring
• Privacy Awareness Training
• GRC Tools Implementation
• Privacy Frameworks

Soft Skills

• Project Management
• Organizational Skills
• Cross-Functional Collaboration
• Strategic Initiative Support
• Complex Problem Solving

Certifications & Qualifications

• CIPP
• CIPM
• CIPT
• CISSP
• CRISC

Industry Keywords

• FERPA
• HIPAA
• CCPA
• COPPA
• PPRA
• Compliance
• Information Security
• Risk Management
• Data Governance
• Privacy Standards

Tools & Technologies

• GRC Tools
• Privacy Management Technologies
• Incident Management Systems
• Reporting Dashboards
• Privacy Monitoring Tools