GRC & Privacy Operations Manager

claylabs; New York (NY); On-site; USD 120,000 - 165,000; Full time

Job summary

Clay is seeking a Product Operations individual contributor to build and own the privacy, vendor management, and compliance systems as the company scales. This role is based in New York and partners with engineering, security, legal, and business teams to implement scalable processes that protect customer data.

You will own end-to-end vendor onboarding, DSAR workflows, and privacy-by-design initiatives while driving cross-functional programs that reduce risk and improve compliance across the

Qualifications

• Bachelor's degree in Information Security, Business, or related field (or equivalent experience).
• 2+ years building and scaling operational programs in SaaS/tech.
• Strong builder mindset; creating processes from scratch.
• Knowledge of privacy laws and frameworks (GDPR, CCPA/CPRA).
• Experience with vendor risk assessments and security questionnaires.
• Familiarity with DSAR processes and tools like Vanta or Transcend.
• Excellent project management and cross-functional collaboration.
• Strong communication with legal, engineering, data, and business teams.
• Ability to work independently in a fast-paced, high-growth environment.

Responsibilities

• Vendor onboarding and risk management: end-to-end process incl. DPAs and subprocessor lists.
• GRC vendor management: manage intake, SLAs, quality metrics for security/compliance.
• Data privacy program management: integrate systems with privacy-by-design practices.
• Compliance reviews: run reviews when evaluating new data sets or vendors.
• Cross-functional program building: scale compliance across the company end-to-end.
• Customer security support: respond to privacy questionnaires from customers.

Skills

Vendor onboarding

GRC

Privacy frameworks

DSAR

Cross-functional collaboration

Project management

Communication

Education

Bachelor's degree in Information Security, Business, or related field

Tools

Vanta

Transcend

Job description

Clay is seeking a Product Operations individual contributor to build and own the privacy, vendor management, and compliance systems as the company scales. This role is based in New York and partners with engineering, security, legal, and business teams to implement scalable processes that protect customer data.

You will own end-to-end vendor onboarding, DSAR workflows, and privacy-by-design initiatives while driving cross-functional programs that reduce risk and improve compliance across the