Privacy & AI Governance Lead for B2B SaaS

Clay Labs; San Francisco (CA); On-site; USD 180,000 - 230,000; Full time

Job summary

Clay Labs is seeking a Privacy Program Manager to build and run a scalable privacy program for data-driven products and AI governance. You’ll own the privacy roadmap, manage records of processing, and coordinate with Legal, Product, Engineering, and Security to embed privacy by design.

Strong knowledge of GDPR/CCPA and hands-on PIAs/DPIAs are required. You will also oversee vendor diligence, data inventory controls, and privacy notices while driving automation to reduce manual work and ensure

Qualifications

• 6 to 8+ years building and running privacy programs or privacy operations at a technology company, ideally high-growth B2B SaaS, data, or AI
• Hands-on experience with privacy requests, data mapping, PIAs and DPIAs, vendor diligence, and consent management
• Working knowledge of GDPR, UK GDPR, CCPA/CPRA, and other US state privacy laws, and good judgment about when to bring in Legal
• AI fluency: you understand how LLM features and agents use data, and you can put frameworks like the EU AI Act into practice
• Technical fluency: you can follow data across systems and APIs and ask engineers precise questions
• A track record of building a program from scratch and making it stick with teams that didn't report to you
• Clear, plain writing, and a habit of using AI and automation to remove routine work
• CIPM or equivalent certification
• A law degree is not required

Responsibilities

• Own the privacy program plan with owners, dependencies, and six- and twelve-month outcomes
• Maintain records of processing for product and operations, set privacy requirements for data inventory
• Run PIAs, DPIAs, transfer and legitimate interests assessments, and AI assessments
• Integrate privacy into product development processes to speed decision-making and keep Legal involved early
• Run the operational side of AI governance and maintain records of product and internal tool use of AI
• Conduct provider and vendor privacy diligence across onboarding, renewal, and exit
• Operate privacy rights requests end-to-end including California DROP requests
• Turn retention rules into system mappings with technical owners and coordinate fixes
• Keep privacy notices and subprocessor lists aligned with actual data processing
• Automate, train, and measure privacy program effectiveness and metrics

Skills

Privacy program management

Privacy operations

GDPR/CCPA knowledge

AI governance

Data mapping

PIAs/DPIAs

Vendor diligence

Consent management

Clear writing

Law/Regulatory framework

Education

CIPM or equivalent certification

Job description

Clay Labs is seeking a Privacy Program Manager to build and run a scalable privacy program for data-driven products and AI governance. You’ll own the privacy roadmap, manage records of processing, and coordinate with Legal, Product, Engineering, and Security to embed privacy by design.

Strong knowledge of GDPR/CCPA and hands-on PIAs/DPIAs are required. You will also oversee vendor diligence, data inventory controls, and privacy notices while driving automation to reduce manual work and ensure