Sr. Privacy Compliance Analyst

Groq, Inc.; San Francisco (CA); On-site; USD 155,000 - 209,000; Full time

Job summary

Groq, Inc. is seeking a Sr. Privacy Compliance Analyst to own day-to-day privacy operations and manage privacy controls in our compliance program. You will oversee operational readiness while Legal handles determinations.

Based in one of our hubs (Dallas, San Francisco, or New York City area) with remote flexibility, this role will eventually move onsite as our Groq office opens. Ideal candidates have 5+ years in privacy and relevant certifications.

Qualifications

• 5+ years in privacy compliance or privacy risk management, including hands-on operationalisation of privacy regulations across business functions.
• Experience conducting regulatory impact assessments for emerging privacy and AI or automated decision-making laws: applicability, business impact, implementation requirements and operational readiness.
• Experience building and applying a risk-based compliance monitoring methodology, and overseeing PIAs and DPIAs for quality, data classification and supporting evidence.
• Experience maturing privacy governance through metrics and reporting (KRIs, KCIs, KPIs) and presenting privacy risk posture to leadership.
• Experience supporting privacy incident investigations and control testing; comfortable partnering with Legal and knowing which questions belong to them.
• Experience with GRC tooling preferred.
• CIPM, CIPP/E or equivalent IAPP certification.

Responsibilities

• Own closure and ongoing maintenance of privacy controls in GRC system and privacy rights requests in Datagrail or similar tool.
• Maintain the obligations library of legal, regulatory and contractual privacy obligations mapped to controls and owners, including incoming regulation and a written operational position per requirement.
• Operate the privacy rights request process (access, deletion, correction, objection) within statutory deadlines, from intake and identity verification through fulfilment and record keeping.
• Report privacy posture and the regulatory horizon to security leadership monthly.

Job description

Mission:

Groq is seeking a Sr. Privacy Compliance Analyst to own day-to-day privacy operations. You will manage the privacy controls in our compliance program. This role owns operational readiness; Legal remains responsible for legal determinations.

Location:

This role will be based in one of our three hiring hubs: the Dallas, San Francisco, or New York City area. The person hired for this role must be based in one of these three areas. You'll have the flexibility to work remotely while we establish our local Groq office, with the expectation that this role will transition to onsite once the office opens.

Responsibilities & opportunities in this role:

• Own closure and ongoing maintenance of privacy controls in GRC system and privacy rights requests in Datagrail or similar tool.
• Maintain the obligations library of legal, regulatory and contractual privacy obligations mapped to controls and owners, including incoming regulation and a written operational position per requirement. Legal determinations remain with Legal.
• Operate the privacy rights request process (access, deletion, correction, objection) within statutory deadlines, from intake and identity verification through fulfilment and record keeping.
• Report privacy posture and the regulatory horizon to security leadership monthly.

Ideal candidates have/are:

• 5+ years in privacy compliance or privacy risk management, including hands-on operationalisation of privacy regulations across business functions.
• Experience conducting regulatory impact assessments for emerging privacy and AI or automated decision-making laws: applicability, business impact, implementation requirements and operational readiness.
• Experience building and applying a risk-based compliance monitoring methodology, and overseeing PIAs and DPIAs for quality, data classification and supporting evidence.
• Experience maturing privacy governance through metrics and reporting (KRIs, KCIs, KPIs) and presenting privacy risk posture to leadership.
• Experience supporting privacy incident investigations and control testing; comfortable partnering with Legal and knowing which questions belong to them.
• Experience with GRC tooling preferred.
• CIPM, CIPP/E or equivalent IAPP certification.

Why Join Us

• Purposeful Hiring: You're not here by accident, and neither is anyone else. Every teammate is handpicked with intention because who we build with matters.
• Builders Wanted: You're not just riding the rocket ship, you're building it. Your work directly shapes the trajectory of our company.
• Mission-Driven Work: We're here to make a real impact. Our mission fuels everything we do.
• Tackling Hard Problems: If easy isn't your thing, you're in the right place. We solve some of the most complex and exciting challenges in our space.
• Excellence Is The Standard: High performance isn't just encouraged, it's the baseline. And it's contagious.

Compensation

Groq is committed to providing competitive compensation through our Total Cash philosophy, which incorporates potential bonus value directly into base pay. The total cash salary range for this position, which is inclusive of the potential bonus value, is $154,900 - $208,700, with individual placement determined by your geographic location, experience, skills, and alignment with internal compensation standards. This range is specific to candidates located in the United States. Compensation for international candidates will vary based on local market dynamics. Beyond cash compensation, Groq also offers a Long-Term Incentive (LTI) Program and a robust suite of employee benefits.