Job Summary
We are seeking an experienced Cyber Security Program Manager to lead enterprise-wide Governance, Risk, Compliance, and Privacy initiatives, with a strong emphasis on ISO
27001 implementation, cyber risk management, security governance frameworks, and global privacy compliance.
This role will drive security and privacy programs, ensure adherence to regulatory requirements including GDPR and CCPA/CPRA, and enhance organizational security and privacy maturity across global operations.
Required Skills & Qualifications
• Strong experience in privacy governance, data protection, and regulatory compliance including GDPR, CCPA/CPRA, and related privacy frameworks.
• Hands-on experience conducting privacy risk assessments, DPIAs, data mapping, and privacy impact analyses.
• Experience developing and implementing privacy policies, standards, notices, and procedures.
• Knowledge of privacy principles, cross-border data transfer requirements, consent management, and data subject rights processes.
• Experience collaborating with legal and compliance teams on privacy and data protection initiatives.
GRC, ISO & Risk Management Expertise
• Expertise in privacy program development and operationalization.
• Experience implementing and maintaining privacy governance frameworks aligned with GDPR, CCPA/CPRA, and industry best practices.
• Strong understanding of privacy risk management, data lifecycle management, and regulatory compliance requirements.
• Experience integrating privacy controls into enterprise risk management and security governance programs.
Preferred Certifications (recommended)
• ISO 27001 Lead Implementer or Lead Auditor (Required)
• CIPP/US, CIPP/E, CIPM, or CIPT (Preferred)
• CRISC, CISSP, or CISM (Preferred
Key Responsibilities
• Lead and manage enterprise Cyber Security GRC and Privacy programs aligned with business, regulatory, and contractual requirements.
• Develop, implement, and maintain privacy governance frameworks supporting compliance with GDPR, CCPA/CPRA, and other global privacy regulations.
• Partner with Legal, HR, IT, and business stakeholders to implement privacy-by design and data protection practices.
• Conduct privacy risk assessments, Data Protection Impact Assessments (DPIAs), and support Records of Processing Activities (ROPA) initiatives.
• Oversee privacy compliance monitoring, regulatory readiness activities, and remediation efforts related to data protection obligations.
• Support third-party privacy risk assessments and vendor compliance reviews.
Never miss an opportunity! Create an alert based on the job you applied for.
