Senior Data Security & Compliance Manager

Nuna Baby Essentials; Morgantown (PA); In loco; USD 120.000 - 145.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical & Prescription Plan

Dental

401(k) with 6% Employer Match

PTO: Holidays, vacation & sick time

Gym facilities

Descrizione del lavoro

Nuna Baby Essentials is seeking a Senior Data Security & Compliance Manager to lead privacy, governance, and regulatory programs for consumer and employee data in a fast-paced environment.

You will collaborate with Legal, HR, IT, and Security to interpret laws across all U.S. states and establish data handling standards, incident response, and vendor risk management.

Competenze

• 10–15 years of experience in privacy, data governance, compliance, or data protection.
• Experience supporting both employee and consumer data privacy programs.
• Experience interpreting and implementing multi-state privacy requirements.

Mansioni

• Lead U.S. enterprise privacy and data governance programs.
• Advise on consumer, applicant, employee, contractor, and candidate data compliance.
• Develop privacy positions, policies, and risk mitigation strategies.

Conoscenze

Privacy & Data Protection

Regulatory Interpretation

Risk Management

Policy Development

Vendor Risk Oversight

Cross-Functional Influence

Investigation & Audit Management

Executive Presence

Program Management

Formazione

Bachelor's Degree in Law

Bachelor's Degree in Information Security

Bachelor's Degree in Information Systems

Bachelor's Degree in Risk Management

Strumenti

Microsoft Office

Wrike

Cobblestone

PatSnap

Descrizione del lavoro

At Nuna, we believe every family deserves thoughtfully designed products that combine safety, innovation, and style. As a global premium baby gear brand, our core values of Community, Generosity, Teamwork, and Excellence guide everything we do, from creating high-quality products to fostering a collaborative and supportive workplace.We are committed to continuous growth, meaningful impact, and making a difference for families around the world.Currently we are looking for a Senior Data Security & Compliance Manager to lead the organization's data privacy, data governance, and regulatory compliance programs across both consumer and employee data fulltime- onsite at our Pennsylvania location.About The RoleReporting into the Legal function, this role serves as the operational owner of data privacy processes, controls, and compliance frameworks, partnering closely with HR, IT, Security, Product, Operations, and external counsel. This individual will oversee compliance with applicable federal, state, and international privacy regulations, establish governance standards for data handling, lead privacy risk assessments, manage regulatory requests and incident response activities, and drive continuous improvement of privacy and data management practices. The ideal candidate will bring deep expertise in United States privacy regulations, including evolving state privacy laws, employee data protection requirements, and consumer data governance frameworks.What You’ll Be DoingPrivacy & Regulatory ComplianceManage U.S. enterprise-wide privacy and data governance programs.Monitor and interpret privacy, data security, and consumer protection laws across all 50 U.S. states.Advise business leaders on compliance requirements related to consumer, applicant, employee, contractor, and candidate data.Ensure compliance with applicable regulations including:CCPA/CPRAVirginia Consumer Data Protection ActColorado Privacy ActConnecticut Data Privacy ActUtah Consumer Privacy ActEmerging state-specific privacy regulationsState biometric privacy lawsState employee monitoring and employee privacy regulationsFederal privacy and cybersecurity requirementsPartner with Legal, HR, & IT on developing privacy positions, policies, and risk mitigation strategies.Data Governance & Employee Data ManagementEstablish and maintain standards for collection, storage, transfer, retention, and deletion of employee and consumer data.Develop data classification, retention, and destruction procedures.Partner with HR regarding employee privacy compliance.Conduct periodic audits of systems, vendors, and business processes.Maintain records of processing activities and data inventories.Security & Incident ManagementCoordinate privacy-related aspects of cybersecurity incidents and data breach investigations.Support breach notification obligations and regulatory reporting.Partner with IT Security to ensure appropriate controls are implemented and documented.Participate in incident response planning and tabletop exercises.Vendor & Third-Party RiskReview vendor privacy and security controls.Support negotiation and administration of:Data Processing Agreements (DPAs)Privacy addendaData transfer agreementsConduct vendor privacy assessments and risk reviews.Training & AwarenessDevelop U.S. enterprise privacy training programs.Deliver targeted training for:HRITCustomer SupportOperationsLeadership teamsPromote a culture of privacy-by-design and data stewardship.Compliance Monitoring & ReportingEstablish privacy metrics, dashboards, and compliance reporting.Conduct periodic compliance reviews and risk assessments.Report findings and recommendations to Legal, HR, IT, and Executive Leadership.This position description is intended to provide a summary of the essential duties, tasks, and responsibilities of this position and shall not be considered an exhaustive listing of all work requirements.What You BringBachelor's Degree in:LawInformation SecurityCybersecurityInformation SystemsRisk ManagementBusiness AdministrationRelated field10 - 15 years of experience in privacy, data governance, compliance, or data protection.Experience supporting both employee and consumer data privacy programs.Experience interpreting and implementing multi-state privacy requirements.Experience partnering with Legal, HR, and Information Security teams.Preferred QualificationsCertified Information Privacy Professional (CIPP/US)Certified Information Privacy Manager (CIPM)Certified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)Experience within technology, healthcare, fintech, e-commerce, or SaaS environments.Skills & CompetenciesPrivacy & Data Protection ExpertiseRegulatory InterpretationRisk ManagementPolicy DevelopmentVendor Risk OversightCross-Functional InfluenceInvestigation & Audit ManagementCommunication & Executive PresenceProgram ManagementChange ManagementStrong executive presence and ability to interact effectively with senior leadership.Possess a clear business-focused outlook and the ability to balance legal risk with commercial objectives.Ability to remain poised under pressure or opposition and make sound decisions in high-stakes situations.Demonstrated sound judgment, integrity, and commitment to high ethical standards.Outstanding listening and communication skills; adept at communicating complex legal concepts to both legal and non-legal audiences.Self-starter able to prioritize workload and thrive in a fast-paced environment.Proven ability to build collaborative relationships across functions, departments, and international teams.Commitment to identifying practical and pragmatic business solutions.TechnologyProficient in Microsoft Office Suite.Ability to quickly and proficiently learn new software and technologies.Experience with litigation management, eDiscovery, contract management, and matter-management systems preferred.Familiarity with:Contract Management Software | Cobblestone preferredProject Management Software | Wrike preferredElectronic Signature PlatformsPatent Analytics and Competitive Intelligence Tools (PatSnap or similar platforms)Corporate Travel Systems | Navan preferredOtherLanguage: Proficiency in English required; additional languages are a plus.Travel: Open to domestic and international business travel.Ability to work extended hours as business needs warrant.Pennsylvania Pay Transparency Act:The salary range for this role is $120,000 to $145,000.The target compensation range and the actual salary are determined by several factors, including specific skills, competencies, years of experience, geographic location, and education, as outlined in the job description.Full-time employees are eligible for company benefits to include medical, prescription, dental, mental health benefits, 401(k) and paid time off (vacation, PSST and paid holidays)Benefits & PerksMedical & Prescription Plan Design: $0 Copay / $0 DeductibleDental, Life Insurance401(k) with a 6% Employer Match.PTO: Holidays, vacation & sick timeGym facilities (PA & WA only)Applicants must be currently authorized to work in the United States on a full-time basis.