Senior Data Security & Compliance Manager

Nuna Baby Essentials; Vancouver (WA); On-site; USD 130,000 - 155,000; Full time

Benefits offered by this job

Medical & Prescription Plan

Dental Insurance

401(k) with Employer Match

PTO & Holidays

Gym facilities (WA only)

Job summary

Nuna Baby Essentials is seeking a Senior Data Security & Compliance Manager to lead privacy, governance, and regulatory compliance for consumer and employee data from its Washington location. You will partner with Legal, HR, IT, Security, and Operations to implement privacy controls and risk mitigation across the enterprise.

Responsibilities include developing data classification standards, managing incident response, and coordinating with vendors for DPAs and privacy addenda.

Qualifications

• Bachelor’s degree in law, information security, or related field.
• Experience building and managing enterprise privacy programs across risk domains.
• Proven ability to interpret multi-state privacy laws and regulatory requirements.
• Experience with audit, incident response, and vendor risk management.
• Strong collaboration with Legal, HR, IT, and Security teams.

Responsibilities

• Lead enterprise privacy and data governance programs.
• Interpret and apply US privacy laws across all states.
• Advise on compliance requirements for consumer, employee, and vendor data.
• Develop data handling standards: collection, retention, destruction.
• Coordinate privacy aspects of cybersecurity incidents and breach investigations.
• Conduct vendor privacy assessments and DPAs.

Skills

Privacy & Data Protection

Regulatory Interpretation

Risk Management

Policy Development

Vendor Risk Oversight

Cross-Functional Influence

Investigation & Audit

Communication Skills

Executive Presence

Program Management

Change Management

Education

Law

Information Security

Cybersecurity

Information Systems

Risk Management

Business Administration

Tools

Wrike

Cobblestone

PatSnap

Navan

eDiscovery Tools

Job description

At Nuna, we believe every family deserves thoughtfully designed products that combine safety, innovation, and style. As a global premium baby gear brand, our core values of Community, Generosity, Teamwork, and Excellence guide everything we do, from creating high-quality products to fostering a collaborative and supportive workplace.We are committed to continuous growth, meaningful impact, and making a difference for families around the world.Currently we are looking for a Senior Data Security & Compliance Manager to lead the organization's data privacy, data governance, and regulatory compliance programs across both consumer and employee data fulltime- onsite at our Washington location.About The RoleReporting into the Legal function, this role serves as the operational owner of data privacy processes, controls, and compliance frameworks, partnering closely with HR, IT, Security, Product, Operations, and external counsel. This individual will oversee compliance with applicable federal, state, and international privacy regulations, establish governance standards for data handling, lead privacy risk assessments, manage regulatory requests and incident response activities, and drive continuous improvement of privacy and data management practices. The ideal candidate will bring deep expertise in United States privacy regulations, including evolving state privacy laws, employee data protection requirements, and consumer data governance frameworks.What You’ll Be DoingPrivacy & Regulatory ComplianceManage U.S. enterprise-wide privacy and data governance programs.Monitor and interpret privacy, data security, and consumer protection laws across all 50 U.S. states.Advise business leaders on compliance requirements related to consumer, applicant, employee, contractor, and candidate data.Ensure compliance with applicable regulations including:CCPA/CPRAVirginia Consumer Data Protection ActColorado Privacy ActConnecticut Data Privacy ActUtah Consumer Privacy ActEmerging state-specific privacy regulationsState biometric privacy lawsState employee monitoring and employee privacy regulationsFederal privacy and cybersecurity requirementsPartner with Legal, HR, & IT on developing privacy positions, policies, and risk mitigation strategies.Data Governance & Employee Data ManagementEstablish and maintain standards for collection, storage, transfer, retention, and deletion of employee and consumer data.Develop data classification, retention, and destruction procedures.Partner with HR regarding employee privacy compliance.Conduct periodic audits of systems, vendors, and business processes.Maintain records of processing activities and data inventories.Security & Incident ManagementCoordinate privacy-related aspects of cybersecurity incidents and data breach investigations.Support breach notification obligations and regulatory reporting.Partner with IT Security to ensure appropriate controls are implemented and documented.Participate in incident response planning and tabletop exercises.Vendor & Third-Party RiskReview vendor privacy and security controls.Support negotiation and administration of:Data Processing Agreements (DPAs)Privacy addendaData transfer agreementsConduct vendor privacy assessments and risk reviews.Training & AwarenessDevelop U.S. enterprise privacy training programs.Deliver targeted training for:HRITCustomer SupportOperationsLeadership teamsPromote a culture of privacy-by-design and data stewardship.Compliance Monitoring & ReportingEstablish privacy metrics, dashboards, and compliance reporting.Conduct periodic compliance reviews and risk assessments.Report findings and recommendations to Legal, HR, IT, and Executive Leadership.This position description is intended to provide a summary of the essential duties, tasks, and responsibilities of this position and shall not be considered an exhaustive listing of all work requirements.What You BringBachelor's Degree in:LawInformation SecurityCybersecurityInformation SystemsRisk ManagementBusiness AdministrationRelated field10 - 15 years of experience in privacy, data governance, compliance, or data protection.Experience supporting both employee and consumer data privacy programs.Experience interpreting and implementing multi-state privacy requirements.Experience partnering with Legal, HR, and Information Security teams.Preferred QualificationsCertified Information Privacy Professional (CIPP/US)Certified Information Privacy Manager (CIPM)Certified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)Experience within technology, healthcare, fintech, e-commerce, or SaaS environments.Skills & CompetenciesPrivacy & Data Protection ExpertiseRegulatory InterpretationRisk ManagementPolicy DevelopmentVendor Risk OversightCross-Functional InfluenceInvestigation & Audit ManagementCommunication & Executive PresenceProgram ManagementChange ManagementStrong executive presence and ability to interact effectively with senior leadership.Possess a clear business-focused outlook and the ability to balance legal risk with commercial objectives.Ability to remain poised under pressure or opposition and make sound decisions in high-stakes situations.Demonstrated sound judgment, integrity, and commitment to high ethical standards.Outstanding listening and communication skills; adept at communicating complex legal concepts to both legal and non-legal audiences.Self-starter able to prioritize workload and thrive in a fast-paced environment.Proven ability to build collaborative relationships across functions, departments, and international teams.Commitment to identifying practical and pragmatic business solutions.TechnologyProficient in Microsoft Office Suite.Ability to quickly and proficiently learn new software and technologies.Experience with litigation management, eDiscovery, contract management, and matter-management systems preferred.Familiarity with:Contract Management Software | Cobblestone preferredProject Management Software | Wrike preferredElectronic Signature PlatformsPatent Analytics and Competitive Intelligence Tools (PatSnap or similar platforms)Corporate Travel Systems | Navan preferredOtherLanguage: Proficiency in English required; additional languages are a plus.Travel: Open to domestic and international business travel.Ability to work extended hours as business needs warrant.Washington State Pay Transparency Act:The salary range for this role is $130,000 to $155,000.The target compensation range and the actual salary are determined by several factors, including specific skills, competencies, years of experience, geographic location, and education, as outlined in the job description.Full-time employees are eligible for company benefits to include medical, prescription, dental, mental health benefits, 401(k) and paid time off (vacation, PSST and paid holidays)Benefits & PerksMedical & Prescription Plan Design: $0 Copay / $0 DeductibleDental, Life Insurance401(k) with a 6% Employer Match.PTO: Holidays, vacation & sick timeGym facilities (PA & WA only)Applicants must be currently authorized to work in the United States on a full-time basis.