Remote Privacy Programs Lead & Tech Governance

Topstep; United States; Remote; USD 155,000 - 185,000; Full time

Benefits offered by this job

Seven company-paid holidays

Generous family leave and front-loaded

401(k) matching with health, dental, &

Vacations with bonus for taking 5 days

Budget for food & groceries

Job summary

Topstep is seeking a Senior Manager, Privacy Program to lead a world-class privacy and technical governance program. You will shape enterprise-wide strategy for GDPR and CCPA compliance while managing a specialized team delivering DSAR operations, vendor reviews, and audit readiness.

You will drive Privacy by Design across Product and Engineering, automate compliance workflows, and partner with Security and Legal to handle privacy incidents and regulatory notifications.

Qualifications

• 8+ years in privacy, data protection, or IT governance in regulated environments.
• 3+ years of direct people management, with hiring and scaling governance or privacy teams.
• Deep knowledge of GDPR and CCPA/CPRA and related security frameworks.

Responsibilities

• Build, lead, and mature a company-wide privacy and technical governance program.
• Oversee privacy operations including DSARs and vendor reviews with PbD integration.
• Lead IT GRC roadmap and automate evidence collection for audits (SOC 2, ISO 27001, NIST).
• Coordinate data classification, RoPA, data mapping, and policy architecture oversight.
• Act as privacy advisor to Product and Engineering leadership and report to executives.

Skills

Privacy & data protection

Leadership & People management

Regulatory knowledge (GDPR/CCPA)

Cloud/GRC tooling familiarity

Technical governance understanding

Executive communication

Tools

DataGrail

OneTrust

Transcend

Vanta

Drata

LogicGate

Job description

Topstep is seeking a Senior Manager, Privacy Program to lead a world-class privacy and technical governance program. You will shape enterprise-wide strategy for GDPR and CCPA compliance while managing a specialized team delivering DSAR operations, vendor reviews, and audit readiness.

You will drive Privacy by Design across Product and Engineering, automate compliance workflows, and partner with Security and Legal to handle privacy incidents and regulatory notifications.