Product Operations: Privacy, Security & Compliance

Clay Labs; New York (NY); On-site; USD 90,000 - 120,000; Full time

Job summary

Clay Labs is seeking a Product Operations professional to build and own scalable compliance and vendor-management processes across the company. You’ll work with engineering, security, legal, and business teams to ensure privacy, data protection, and regulatory compliance are embedded in our vendor relationships and data flows.

You’ll lead end-to-end onboarding and risk reviews, manage external GRC vendors, and scale privacy-by-design practices across the org.

Qualifications

• Bachelor’s degree in Information Security, Business, or a related field (or equivalent experience).
• 2+ years of experience building and scaling operational programs, ideally in a SaaS or tech environment.
• Strong builder mindset: create processes and systems from scratch.
• Understanding of privacy laws and frameworks (GDPR, CCPA/CPRA, etc.) with practical application across vendor management, data flows, and employee compliance.
• Experience with vendor risk assessments, security questionnaires, and DPA/subprocessor management.
• Familiarity with DSAR processes and compliance tools like Vanta, Transcend, or similar platforms.
• Excellent project management skills to drive cross-functional initiatives to completion.
• Strong communication skills for partnering with legal, engineering, data teams, and business stakeholders.
• Ability to work independently, prioritize effectively, and adapt in a fast-paced, high-growth environment.

Responsibilities

• Vendor Onboarding & Risk Management: Build and own end-to-end vendor onboarding compliance, reviews (DPA, SOC 2/GDPR), update subprocessor list, and manage customer notifications.
• GRC Vendor Management: Own internal contact for external GRC vendors, manage intake, SLAs, quality review, and performance metrics.
• Data Privacy Program Management: Integrate teams into Clay’s compliance tools/framework; DSAR rights and privacy-by-design scaling.
• Compliance Reviews: Create processes for compliance reviews when evaluating new data sets and vendor compliance.
• Cross-Functional Program Building: Create operational processes to scale compliance work; own programs end-to-end.
• Customer Security Support: Assist in responding to security/privacy questionnaires from customers.

Skills

Vendor onboarding

GRC

Data privacy

DSAR

Privacy laws

Project mgmt

Cross-functional

Security questionnaires

DPA management

Privacy by design

Communication

Education

Bachelor's degree

Tools

Vanta

Transcend

Job description

Clay Labs is seeking a Product Operations professional to build and own scalable compliance and vendor-management processes across the company. You’ll work with engineering, security, legal, and business teams to ensure privacy, data protection, and regulatory compliance are embedded in our vendor relationships and data flows.

You’ll lead end-to-end onboarding and risk reviews, manage external GRC vendors, and scale privacy-by-design practices across the org.