Sr Privacy & Consent Compliance Manager

Tally; San Francisco (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Happen Bank is seeking a Sr Privacy & Consent Compliance Manager to lead the Bank's privacy program and customer communication preferences. In this role, you will help protect customer information and ensure consent is honored under GLBA, Regulation P, CAN-SPAM, TCPA, and state privacy laws.

You will partner with Legal, Compliance, Marketing, Technology, and Operations to translate regulatory requirements into practical policies, controls, and compliant customer experiences, while guiding

Qualifications

• 6+ years in banking or financial services compliance/risk/audit.
• 3+ years direct privacy compliance experience.
• Bachelor's degree or higher; strong regulatory knowledge and interpretation abilities.

Responsibilities

• Lead design, implementation, and governance of the privacy compliance program.
• Monitor regulatory developments and assess impact on products and data practices.
• Own CAN-SPAM and TCPA compliance, including consent and opt-out management across channels.
• Set and maintain customer communication preference standards.
• Develop privacy policies, procedures, and notices; keep guidance current.
• Provide privacy guidance for new products, marketing campaigns, and vendor relationships (privacy-by-design).
• Conduct annual privacy risk assessments and ongoing monitoring.
• Support regulatory examinations, audits, and regulator inquiries with evidence and corrective actions.
• Coordinate with Third-Party Risk Management on vendors handling data or communications.
• Oversee intake, investigation, and resolution of privacy-related complaints/incidents.
• Use AI thoughtfully to improve privacy activities with governance and oversight.
• Deliver privacy training and leadership reporting on privacy metrics.

Skills

Privacy compliance

Regulatory knowledge

Communication

Analytical thinking

Vendor management

AI tooling

Education

Bachelor's degree or higher

Tools

Privacy software

Regulatory dashboards

Job description

Happen Bank (formerly LendingClub) is built around a simple purpose: to clear the way to help people turn intention into action, and action into financial progress. That means offering focused products, a frictionless mobile-first experience, and clear terms with no gotchas. Respect and fairness is part of our DNA, and that ideal shapes how we work, how we treat each other, and how we invest in our employees and our community. Join us in using data, bold thinking, and a commitment to innovation to help clear the way for millions of Americans to achieve more.

About the Role

Happen Bank is seeking a Sr Privacy & Consent Compliance Manager to lead the Bank's privacy compliance and customer communication preferences programs. In this individual contributor role, you'll help protect customer information, ensure customer communication choices are honored, and maintain compliance with applicable privacy and communication regulations, including the Gramm-Leach-Bliley Act (GLBA), Regulation P, CAN-SPAM, the Telephone Consumer Protection Act (TCPA), and state privacy laws.

You'll partner closely with Legal, Compliance, Marketing, Technology, Operations, and business leaders to translate regulatory requirements into practical policies, controls, and customer experiences. You'll also serve as a trusted advisor to leadership, helping strengthen privacy practices, responsible data stewardship, and the thoughtful adoption of emerging technologies.

What You'll Do

• Lead the design, implementation, and ongoing oversight of the Bank's privacy compliance program, ensuring adherence to GLBA, Regulation P, and applicable federal and state privacy laws and regulations
• Monitor regulatory developments, including new and amended state privacy laws, agency guidance, and enforcement trends, and assess their impact on products, processes, and data practices
• Own compliance requirements for customer communications under CAN-SPAM, TCPA, and related federal and state rules, including consent, revocation, and opt-out management across email, text, phone, direct mail, and digital channels
• Establish and maintain customer communication preference standards, ensuring consent and opt-out requests are accurately captured, honored, synchronized across systems, and processed within required timeframes
• Develop and maintain privacy policies, procedures, standards, customer-facing disclosures, and privacy notices, ensuring guidance remains accurate and current
• Provide privacy and communication compliance guidance for new products, marketing campaigns, vendor relationships, data sharing arrangements, and technology initiatives, including privacy-by-design reviews
• Conduct annual privacy risk assessments and ongoing compliance monitoring, identifying gaps and opportunities to strengthen controls and mitigate risk
• Support regulatory examinations, internal and external audits, and regulator inquiries, including preparing responses, coordinating evidence, and developing and tracking corrective action plans through closure
• Partner with Third-Party Risk Management to assess and oversee vendors that handle customer data or conduct communications on Happen Bank's behalf
• Oversee the intake, investigation, and resolution of privacy-related complaints, inquiries, and incidents in coordination with Legal, Information Security, and Customer Care
• Use AI thoughtfully to improve privacy and communication compliance activities, including monitoring, testing, regulatory change analysis, and complaint trend detection, while maintaining appropriate governance, validation, human oversight, and accountability
• Deliver privacy training and awareness programs and develop clear reporting, metrics, and key risk indicators for leadership

About You

• 6+ years of experience in banking or financial services, primarily within compliance, risk management, or audit
• Bachelor's degree or higher, or equivalent combination of education and experience
• 3+ years of direct experience in privacy compliance
• Deep understanding of privacy regulations, including GLBA, Regulation P, applicable state privacy laws, CAN-SPAM, and TCPA, with the ability to apply requirements to real-world products and processes
• Strong communication and influencing skills with the ability to build credibility, advise senior leaders, and drive alignment across organizational boundaries
• Strong analytical and problem-solving skills with the ability to interpret ambiguous regulatory requirements and make sound, risk-based decisions
• Ability to balance strategic priorities with detailed execution while managing competing demands in a regulated environment
• Experience collaborating across Legal, Marketing, Technology, Operations, and business teams to support effective privacy and consent compliance practices
• High standards of integrity, ethics, accountability, and attention to detail, with the ability to engage confidently with regulators, examiners, and auditors
• You have hands-on experience using AI tools to accelerate your work and improve output quality, and you're comfortable sharing effective approaches with colleagues. You apply sound judgment around accuracy, data sensitivity, regulatory requirements, and where human validation and oversight remain essential

Nice to Have

• Professional privacy certification such as Certified Information Privacy Professional (CIPP/US), Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), or Artificial Intelligence Governance Professional (AIGP)
• Certified Regulatory Compliance Manager (CRCM) (this part seems cut off)