Position Overview

We are seeking a Privacy and Compliance Manager to lead and oversee all aspects of our privacy and data protection compliance programs. This role is key to maintaining our global reputation for transparency, integrity, and security in handling customer and partner data.

The ideal candidate has deep experience with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and New York SHIELD Act, and will work cross-functionally with legal, engineering, product, and customer-facing teams.

Key Responsibilities

• Serve as the designated privacy and security officer under GDPR and lead compliance initiatives for CCPA/CPRA, NY SHIELD Act, and other emerging privacy laws.
  
  
• Own and maintain the company’s Record of Processing Activities (ROPA) and ensure its accuracy and availability.
  
  
• Lead internal privacy impact assessments (PIAs) and data protection impact assessments (DPIAs).
  
  
• Develop, maintain, and implement company-wide privacy policies, procedures, and training programs.
  
  
• Oversee and guide contractual data privacy reviews, including Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), and vendor privacy addenda.
  
  
• Act as the primary point of contact for EU/EEA Supervisory Authorities, Data Subjects, and external auditors.
  
  
• Monitor global legal and regulatory developments and proactively assess their impact on company operations.
  
  
• Advise product and engineering teams on privacy-by-design and default principles in the development of new features.
  
  
• Collaborate with the Information Security team to ensure alignment between privacy and cybersecurity protocols.
  
  
• Lead or support the company’s response to data subject access requests (DSARs) and personal data breach incidents.
  
  
• Assist with cross-border data transfer strategies, including adequacy assessments and transfer impact assessments.
  
  

Qualifications

• 8–10 years of relevant experience in privacy, data protection, or regulatory compliance, with a strong track record in GDPR and U.S. state privacy laws.
  
  
• Experience working with technology-driven companies or in SaaS, logistics, or supply chain sectors preferred.
  
  
• Strong understanding of international data privacy frameworks, including GDPR, CCPA/CPRA, NY SHIELD Act, and evolving global laws.
  
  
• CIPP/E, CIPP/US, CIPM, or other IAPP certifications strongly preferred.
  
  
• Demonstrated experience leading privacy programs or audits within a high-growth or international company.
  
  
• Excellent legal, business, and technical judgment, with strong stakeholder management skills.
  
  
• Proactive, collaborative, and capable of working autonomously and across global teams.
• Legal degree