Remote Senior Privacy Compliance & Operations Lead

Groq, Inc.; New York (NY); Hybrid; USD 155,000 - 209,000; Full time

Benefits offered by this job

Long-term incentives

Job summary

Groq, Inc. is seeking a Sr. Privacy Compliance Analyst to own day-to-day privacy operations and manage controls in the compliance program. The role entails operating privacy rights requests and maintaining obligations libraries, with Legal handling determinations.

Candidates should have 5+ years in privacy, experience with regulatory impact assessments, and a strong background in privacy governance and metrics, plus a CIPM/CIPP/E certification or equivalent.

Qualifications

• 5+ years in privacy compliance or privacy risk management, including hands-on operation.
• Experience conducting regulatory impact assessments for emerging privacy and AI laws.
• Experience building and applying a risk-based compliance monitoring methodology and PIAs/DPIAs.
• Experience maturing privacy governance through metrics and reporting (KRIs, KCIs, KPIs).
• Experience supporting privacy incident investigations and control testing with Legal collaboration.
• CIPM, CIPP/E or equivalent IAPP certification.

Responsibilities

• Own closure and ongoing maintenance of privacy controls in the GRC system and privacy rights requests.
• Maintain the obligations library mapped to controls and owners, including new regulations.
• Operate the privacy rights request process within statutory deadlines.
• Report privacy posture and regulatory horizon to security leadership monthly.

Skills

Privacy compliance

GRC tooling

Regulatory impact assessments

Privacy risk management

Data governance

KPIs/KRIs/KPIs

Incident investigations

Cross-functional collaboration

Education

CIPM or CIPP/E

Tools

Datagrail or similar tool

GRC tooling

Job description

Groq, Inc. is seeking a Sr. Privacy Compliance Analyst to own day-to-day privacy operations and manage controls in the compliance program. The role entails operating privacy rights requests and maintaining obligations libraries, with Legal handling determinations.

Candidates should have 5+ years in privacy, experience with regulatory impact assessments, and a strong background in privacy governance and metrics, plus a CIPM/CIPP/E certification or equivalent.