Privacy, Risk & Controls Manager

BoF Careers; Jersey City (NJ); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Employee discount

Executive coaching

Volunteer days

Comprehensive benefits package

Job summary

Tory Burch LLC seeks a senior privacy, risk, and governance professional to translate regulatory requirements into technical controls and partner with engineering, data, security, and legal teams.

You will own enterprise data mapping, data inventories, and data flow analysis using OneTrust, driving risk-based privacy programs across the organization and ensuring PCI and SOX compliance in architecture and operations.

Qualifications

• Seven+ years of privacy, security, risk, compliance, or data governance experience.
• Ability to translate regulatory requirements into technical/operational controls.
• Experience with enterprise data mapping, inventories, or data flow analysis.
• Strong collaboration with engineering, data, legal, and security teams.

Responsibilities

• Own enterprise data mapping, data inventories, and data flow analysis (OneTrust and system analysis).
• Translate regulatory and governance requirements into technical/operational control requirements.
• Work with engineering, data, platform, security, legal, and business teams on system behavior and data flows.
• Identify data protection risks and define practical mitigation approaches.
• Lead privacy working sessions and meetings with counsel; maintain agendas and drive follow-up.
• Drive privacy workflows, consent management, data access/deletion requests, and data retention enforcement.

Skills

Data privacy

Risk assessment

Regulatory compliance

Cross-functional collaboration

Program management

Education

Bachelor's degree in technology, information systems, cybersecurity, data management, or related field

Tools

OneTrust

DSAR tooling

Job description

Tory Burch LLC seeks a senior privacy, risk, and governance professional to translate regulatory requirements into technical controls and partner with engineering, data, security, and legal teams.

You will own enterprise data mapping, data inventories, and data flow analysis using OneTrust, driving risk-based privacy programs across the organization and ensuring PCI and SOX compliance in architecture and operations.