Program Manager - GDPR & Data Privacy Compliance

Job Summary

We are seeking an experienced Program Manager - GDPR & Data Privacy Compliance to lead enterprise-wide privacy initiatives and ensure compliance with global data protection regulations such as GDPR, CCPA, and emerging AI governance frameworks. The ideal candidate will have strong experience managing privacy programs, collaborating with cross-functional teams, implementing privacy controls, and driving compliance across technology and business organizations.

This role requires expertise in program management, data privacy, regulatory compliance, risk management, and stakeholder engagement, with the ability to balance legal requirements and business objectives while supporting privacy-by-design practices throughout the product lifecycle.

Experience Required

• 8-10+ Years of experience in Program Management, Data Privacy, Compliance, or Information Security
• Experience managing enterprise privacy or regulatory compliance programs
• Experience in Technology, SaaS, Cloud, or AI environments is preferred

Key Responsibilities

Program Management

• Lead end-to-end execution of enterprise privacy and compliance programs.
• Develop project plans, timelines, milestones, budgets, and risk mitigation strategies.
• Manage multiple cross-functional privacy initiatives simultaneously.
• Track program progress and communicate status to executive stakeholders.

Data Privacy & Compliance

• Implement and maintain privacy frameworks aligned with GDPR, CCPA, and global privacy regulations.
• Drive Privacy by Design principles throughout the Software Development Lifecycle (SDLC).
• Conduct and facilitate Privacy Impact Assessments (PIAs).
• Develop and maintain:
  • Data Inventories
  • Data Flow Maps
  • Records of Processing Activities (RoPA)
• Support Data Subject Access Requests (DSARs), audits, and regulatory inquiries.
• Monitor privacy incidents and ensure timely escalation, investigation, and resolution.

Stakeholder Management

• Collaborate with Legal, Security, Engineering, Product, Compliance, and Business teams.
• Act as the primary point of contact for privacy initiatives.
• Balance legal, compliance, and business priorities while ensuring regulatory adherence.

Governance & Risk Management

• Support enterprise data governance initiatives.
• Develop privacy policies, standards, and operational procedures.
• Monitor evolving privacy regulations and AI governance requirements.
• Ensure organizational compliance with global privacy obligations.

Training & Awareness

• Develop and deliver privacy awareness and training programs.
• Promote privacy-first culture across the organization.
• Provide guidance on regulatory compliance and best practices.

Required Technical Skills

Program & Project Management

• Program Management
• Project Management
• Agile
• Scrum
• Risk Management
• Change Management
• Stakeholder Management
• Governance

Data Privacy

• GDPR
• CCPA
• Global Privacy Regulations
• Data Protection
• Privacy Compliance
• Privacy by Design
• Data Privacy Frameworks
• Data Governance

Privacy Operations

• Privacy Impact Assessment (PIA)
• Data Subject Access Requests (DSAR)
• Records of Processing Activities (RoPA)
• Data Flow Mapping
• Data Inventory Management
• Privacy Incident Management
• Regulatory Compliance

Security & Compliance

• Information Security
• Risk Management Frameworks
• Compliance Audits
• AI Governance
• AI Regulatory Compliance

Preferred Skills

• AI Governance
• Responsible AI
• SaaS Platforms
• Cloud Technologies (AWS, Azure, Google Cloud Platform)
• Information Security
• ISO 27001
• SOC 2
• NIST
• Privacy Engineering
• Security Risk Assessments