Manager, Regulatory Compliance
BeOne Medicines
Privacy Compliance Manager
Instructure
full-time
Posted on:
Location Type: Remote
Location: Remote • 🇺🇸 United States
Visit company websiteSalary
💰 $130,000 - $150,000 per year
Job Level
SeniorLead
Tech Stack
Cloud
About the role
- Lead and evolve the company’s global privacy program with clear accountability, measurable goals, and cross-functional alignment.
- Develop and maintain internal privacy policies, procedures, and governance frameworks.
- Establish a privacy architecture that aligns with global regulations and our organizational values.
- Deliver regular reports to leadership on program effectiveness, risks, and remediation efforts.
- Scale and maintain the organization’s privacy operations to protect personal data across customer, employee, and internal systems.
- Ensure compliance with global privacy regulations (e.g., GDPR, CCPA/CPRA, PIPEDA, FERPA).
- Conduct and manage risk assessments, including DPIAs, PIAs, DSARs, and third-party privacy reviews.
- Manage data inventory and mapping, including records of processing activities (ROPA).
- Define and improve technical and operational controls for data retention, access management, consent, and data minimization.
- Conduct privacy assessments of vendors and manage third-party risk related to data handling.
- Manage and respond to DSARs within regulatory timelines.
- Partner with Product, Engineering, Security, and Legal to embed privacy-by-design principles across the company’s systems and products.
- Collaborate on data classification, localization, and sovereignty strategies with security and infrastructure teams.
- Participate in cross-functional projects involving data governance, customer controls, and tooling for privacy features.
- Serve as the privacy lead for external audits, certifications (e.g., ISO 27701, SOC2 Privacy), and regulatory inquiries.
- Build scalable processes for privacy monitoring, evidence collection, and reporting using GRC platforms and automation.
- Participate in incident and breach response processes, including regulatory notifications when required.
- Develop and deliver engaging privacy training and awareness programs across the organization.
- Foster a culture of privacy and data responsibility.
- Serve as the organization’s privacy liaison to customers and regulators as needed.
Requirements
- At least 7 years of experience in privacy operations, compliance and program management in educational technology or broader education sectors is highly valued.
- Proven success leading enterprise-wide privacy initiatives, including policy development, training, and operational implementation.
- Experience with privacy assessments, DSAR response workflows, and regulatory alignment.
- Track record managing or supporting compliance frameworks (SOC 2, ISO 27701, PCI DSS, FedRAMP).
- Hands-on experience managing external audits and certification cycles.
- Privacy certifications issued by the IAPP such as CIPP/US, CIPP/E, CIPP/M or CIPT)
- Strong understanding of how to operationalize privacy controls at scale, especially in cloud-native environments.
- Familiarity with data flow mapping, access controls, consent management, and retention/deletion strategies.
- Experience with GRC platforms (e.g., OneTrust, AuditBoard) and project management tools (e.g., Jira, Asana, Confluence).
- Excellent cross-functional collaboration and stakeholder management skills.
- Clear and effective communicator with strong documentation and reporting practices.
- Comfortable interacting with executive leadership and external stakeholders independently.
- Strategic thinker with the ability to assess privacy risk and deliver practical, scalable solutions.
- Agile, resourceful, and adaptable in a fast-paced environment.
Benefits
- Competitive compensation, plus all full-time employees participate in our ownership program - because everyone should have a stake in our success.
- Flexible schedules and a remote-friendly culture, with hybrid or onsite work options available in some regions for specific roles
- Generous time off, including local holidays and our annual company-wide “Dim the Lights” week in late December, when we encourage everyone to step back and recharge
- Comprehensive wellness programs and mental health support
- Annual learning and development stipends to support your growth
- The technology and tools you need to do your best work — typically a Mac, with PC options available in some locations
- Motivosity employee recognition program
- A culture rooted in inclusivity, support, and meaningful connection
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
privacy operationscompliance managementpolicy developmentprivacy assessmentsDSAR response workflowscompliance frameworksprivacy controlsdata flow mappingconsent managementretention strategies
Soft skills
cross-functional collaborationstakeholder managementclear communicationdocumentation practicesstrategic thinkingrisk assessmentadaptabilityresourcefulnessengagementtraining delivery
Certifications
CIPP/USCIPP/ECIPP/MCIPTISO 27701SOC 2PCI DSSFedRAMP
