Privacy Operations Manager in United

Energy Jobline
United States
2 days ago
Apply on www.energyjobline.com
Prepare application

Role details

Contract type
Temporary to permanent
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Working hours
Regular working hours

Tech stack

Software as a Service Cyber Security Information Systems Data Governance Security Information and Event Management Privacy Controls Data Processing Data Classification Information Technology Data Management

Job description

Our customer, a software and technology solutions organization, is searching for a talented Privacy Operations Manager to lead and operationalize a global privacy program within a complex, technology-driven organization. This role will partner closely with Legal, Information Security, Product, IT, and business stakeholders to ensure compliance with global privacy regulations while driving privacy-by-design principles across products, services, and business functions.

Requirements

The ideal candidate will have a strong blend of privacy, compliance, cybersecurity, and operational expertise, along with proven experience managing teams and implementing scalable privacy frameworks., * Bachelor’s degree in Law, Information Systems, Computer Science, Cybersecurity, or a related field. \n

  • 6 to 8 years of experience in privacy, cybersecurity, compliance, or related functions, preferably within a SaaS or technology environment. \n

  • 3 to 5 years of people management experience. \n

  • Privacy certification such as CIPM, CIPP, CIPT, CISSP, or equivalent. \n

  • Strong knowledge of global privacy regulations including GDPR, CCPA, PIPEDA, and related frameworks. \n

  • Experience conducting privacy risk assessments and implementing privacy controls. \n

  • Advanced experience configuring and managing OneTrust, including assessments, data inventory management, consent management, and DSAR workflows. \n

  • Experience translating legal and regulatory requirements into operational and technical controls. \n

  • Strong understanding of privacy-by-design principles and sensitive data processing requirements. \n

  • Knowledge of data classification, retention, and lifecycle management. \n

  • Proven success managing multiple projects and priorities in a large, complex organization. \n

  • Excellent communication, stakeholder management, analytical, and problem-solving skills. \n, * Familiarity with data governance platforms, SIEM solutions, and Privacy Enhancing Technologies (PETs).

Benefits & conditions

n \n

  • Implement privacy policies, procedures, and operational frameworks \n

  • Conduct or facilitate the conduct of risk assessments, including - privacy impact assessments (PIAs) data protection impact assessments (DPIAs), transfer impact assessments (TIAs) \n

  • Coordinate responses to data subject access requests (DSARs) and ensure timely resolution \n

  • Track and report on privacy program metrics and KPIs \n

\n

\n

Privacy Compliance & Risk Management

\n \n

  • Track and report changes in new/existing privacy regulation and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others \n

  • Build out and maintain data inventory, and data mapping initiatives \n

  • Identify privacy risks and work with stakeholders to implement mitigation strategies \n

  • Support privacy incident response and breach notification processes \n

  • Conduct privacy audits and assessments of internal processes and third-party vendors \n

\n

\n

Cross-Functional Collaboration

\n \n

  • Partner with Legal, Information Security, IT, Product, and Business teams to integrate privacy by design principles \n

  • Serve as a privacy subject matter expert and advisor to business units \n

  • Facilitate privacy training and awareness programs for employees \n

  • Work with vendors and partners to ensure contractual privacy obligations are met \n

  • Identify current sub-processor’s and updating contractual documentation to reflect current state \n

\n

\n

Documentation & Reporting

\n \n

  • Maintain records of processing activities (ROPA) and privacy documentation \n

  • Prepare privacy reports for leadership and relevant stakeholders \n

  • Document privacy procedures and create operational playbooks \n

  • Support regulatory inquiries and audits \n

\n

\n, ElevateFlex provides an unparalleled platform for you to work with innovative companies and law firms worldwide on various exciting and challenging roles. We pride ourselves on respecting your individuality and choice of career, allowing you to bring your very best to each role, to continue to develop your experience, expertise, and professional network, and be supported with a package of benefits tailored to your needs.

\n

\n

As a member of our talent community, you will benefit from Elevate’s curated training suite to enhance and develop your skills. You will have access to hands-on support, networking opportunities, and accessing the most up-to-date resources. By joining our global community of Talent, you will get the opportunity to work with our best top law firms and law department customers.

\n

\n

Equitability and are critical to ElevateFlex’s success. As The Law Company, changing the legal business landscape, we know a diverse, inclusive work culture is at the heart of attracting, retaining, and celebrating the industry’s most talented people. We empower our employees to bring their whole selves to work because we know that of experience and perspective drive innovation and is simply good business.

\n

\n

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.energyjobline.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:11 min

Introduction to cloud-native application developer security

Micah Silverman ¡ World Congress 2022

1:53 min

Reinventing data governance as a collaborative business foundation

Farooq Sheikh Farooq Sheikh +3 ¡ World Congress 2025

2:10 min

Defining stream data processing versus standard event processing

Soroosh Khodami Soroosh Khodami ¡ World Congress 2024

5:51 min

Managing GDPR regulations and compliance frameworks

Damir Dobric ¡ Coffee With Developers

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger ¡ LIVE

4:22 min

Navigating AI regulations and data privacy compliance

Daniel Gebler Daniel Gebler +3 ¡ World Congress 2025

Videos

See all

Related articles

See all