Product Operations: Privacy, Security & Compliance

Clay; New York (NY); On-site; USD 110,000 - 160,000; Full time

Job summary

Clay is seeking a Product Operations professional to build and own scalable compliance systems across vendor management, data privacy, and security. You will collaborate with engineering, legal, security, and business teams to implement processes that scale with growth.

You will own end-to-end programs, from onboarding new vendors to responding to privacy questionnaires, DSAR rights, and data protection considerations, in a fast-paced, high-growth environment.

Qualifications

• Bachelor's degree or equivalent experience in information security, business, or related field.
• 2+ years of experience building and scaling operational programs in SaaS or tech.
• Strong ability to create processes and systems from scratch.
• Understanding of privacy laws and frameworks (GDPR, CCPA/CPRA) with practical application across vendor management.
• Experience with vendor risk assessments, security questionnaires, and DPA/subprocessor management.
• Familiarity with DSAR processes and tools.
• Excellent project management skills for cross-functional initiatives.
• Strong communication with legal, engineering, data teams, and stakeholders.
• Ability to work independently in a fast-paced, high-growth environment.

Responsibilities

• Build and own end-to-end vendor onboarding compliance processes (DPA, SOC 2/GDPR), manage subprocessor lists and customer notifications.
• Serve as internal owner for external GRC vendors; manage intake, SLAs, quality reviews, and performance metrics.
• Scale privacy-by-design practices; integrate data privacy tools and frameworks across teams.
• Develop and execute compliance reviews for new data sets and vendor purchases.
• Create cross-functional programs to scale compliance work company-wide; own programs end-to-end.
• Assist in responding to security/privacy questionnaires from customers.

Skills

Builder mindset

Privacy laws knowledge

Vendor risk assessments

DSAR processes

Project management

Communication skills

Independent worker

Cross-functional collaboration

Education

Bachelor's degree in Information Security, Business, or related field

Tools

Vanta

Transcend

Job description

Clay is seeking a Product Operations professional to build and own scalable compliance systems across vendor management, data privacy, and security. You will collaborate with engineering, legal, security, and business teams to implement processes that scale with growth.

You will own end-to-end programs, from onboarding new vendors to responding to privacy questionnaires, DSAR rights, and data protection considerations, in a fast-paced, high-growth environment.