Senior Privacy Program Manager - Security Compliance

Working Nomads; Ireland; On-site; EUR 90,000 - 120,000; Full time

Job summary

A technology company in Ireland is seeking a Senior Privacy Program Manager to lead its Privacy Program, focusing on governance, risk, and compliance practices. This role requires extensive experience in privacy program management and a solid understanding of global privacy laws. The successful candidate will work cross-functionally with Legal, Product, Engineering, and Security teams to embed privacy principles into the business. Excellent communication and project management skills are essential.

Qualifications

• Progressive experience in technology, SaaS, or AI-driven privacy program management.
• Ability to lead cross-functional initiatives and deliver outcomes.
• Familiarity with frameworks like ISO 27701, NIST, or SOC 2.

Responsibilities

• Own the design and delivery of the Privacy Program.
• Lead workstreams to embed privacy principles into the development lifecycle.
• Drive Data Protection Impact Assessment and governance processes.

Skills

Experience in privacy, data-protection, or compliance program management

Strong understanding of global privacy laws

Excellent program and project-management skills

Clear communication skills

Education

CIPP/E, CIPM, or equivalent privacy certification

Tools

Privacy-technology tools (OneTrust, TrustArc)

Job description

Senior Privacy Program Manager - Security Compliance

Senior Manager, Privacy Program Our mission at HubSpot is to help millions of organisations grow better. As part of our Legal & Compliance organisation, you’ll lead the global Privacy Program—driving scalable governance, risk, and compliance practices that enable HubSpot to innovate responsibly. You’ll partner cross-functionally with Legal, Product, Engineering, and Security teams to embed privacy and data-protection principles across the business. This role blends strategic vision with hands‑on execution and is ideal for a collaborative leader who thrives at the intersection of privacy, technology, and business.

What You’ll Do

Own the design, delivery, and continuous improvement of HubSpot’s enterprise Privacy Program.

Lead cross‑functional workstreams to embed privacy‑by‑design and AI‑governance principles into the product development lifecycle.

Operationalize global privacy and AI‑regulatory frameworks (e.g., GDPR, CCPA/CPRA, LGPD, EU AI Act) through scalable processes and tooling.

Maintain and evolve data‑inventory and data‑flow mapping programs to strengthen transparency and accountability.

Drive the Data Protection Impact Assessment (DPIA) and related governance processes.

Develop and deliver privacy awareness, education, and communications for technical and business audiences.

Define and report on program KPIs, audit findings, and risk indicators to leadership; ensure timely remediation.

Partner with Third‑Party Risk Management to embed privacy controls into vendor lifecycle management.

Collaborate closely with Legal, Security, Product, and Business stakeholders to align privacy operations with HubSpot’s strategic priorities.

What You’ll Bring Required Qualifications

Progressive experience in privacy, data‑protection, or compliance program management—ideally in a technology, SaaS, or AI‑driven environment.

Strong understanding of global privacy laws and frameworks (e.g., GDPR, CCPA/CPRA, LGPD, AI Act) and how to operationalize them.

Proven ability to lead complex, cross‑functional initiatives and deliver measurable outcomes.

Excellent program and project‑management skills, including prioritization and stakeholder alignment.

Clear communication skills; able to translate regulatory or technical concepts for diverse audiences.

CIPP/E, CIPM, or equivalent privacy certification.

Familiarity with frameworks such as ISO 27701, NIST, or SOC 2.

Nice-to-Have Qualifications

Experience with AI governance or model‑risk‑management frameworks.

PMP or similar project‑management certification.

Experience with privacy‑technology tools (OneTrust, TrustArc, etc.).

Exposure to data‑protection auditing or regulatory engagement.