Senior Privacy & Compliance Manager

Rosie's People

Privacy & Compliance Lead focusing on GDPR and compliance for an AI-driven technology firm. Managing compliance programmes and legal operations within a flexible, remote-first environment.

Posted 6/16/2026part-timeRemote • New York • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support the day-to-day operation of the compliance programme
Maintain compliance calendars, risk registers, and internal policy libraries
Monitor regulatory developments across relevant UK, EU, and international frameworks
Prepare compliance briefings and management updates
Coordinate compliance training and awareness activities
Support audit preparation and certification activities, including ISO 27001 and SOC 2
Support GDPR compliance activities across the business
Maintain privacy records, registers, and supporting documentation
Coordinate Data Protection Impact Assessments (DPIAs)
Manage Data Subject Rights Requests and associated processes
Support processor due diligence and vendor privacy reviews
Maintain privacy notices, policies, and supporting documentation
Assist with international data transfer assessments and documentation
Support the management of standard commercial agreements, including NDAs, DPAs, supplier agreements, and advisory contracts
Maintain contract registers and renewal tracking
Manage template libraries and version control
Assist with legal due diligence activities relating to partnerships, procurement, and fundraising initiatives
Coordinate document execution and filing processes
Draft, maintain, and update internal policies and governance documentation
Coordinate policy reviews and staff acknowledgements
Support management reporting on compliance and risk matters
Act as a first point of contact for internal compliance-related queries
Escalate legal matters appropriately to the General Counsel

Requirements

What you’ll need

4–8 years' experience within privacy, compliance, legal operations, governance, regulatory affairs, or similar functions
Strong practical experience operating GDPR compliance processes
Experience managing compliance programmes or compliance-related activities
Experience supporting legal operations and contract administration
Excellent written communication and documentation skills
Strong organisational skills and attention to detail
The ability to work independently whilst exercising sound professional judgement
CIPP/E, CIPM, CIPT, or similar privacy/compliance certifications preferred
Experience within SaaS, cybersecurity, fintech, or regulated technology environments preferred
Exposure to ISO 27001 or SOC 2 programmes preferred
Familiarity with NIS2, ePrivacy, AI Act, or related regulatory frameworks preferred
Experience using contract lifecycle management tools or legal operations platforms preferred
Experience supporting international privacy and compliance activities preferred

Benefits

Comp & perks

Flexible remote working
Opportunity to work alongside experienced legal, cybersecurity, technology, and commercial leaders
Significant ownership and responsibility
Exposure to complex international privacy and compliance matters
Opportunity to contribute to the development of a growing technology platform

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

GDPR complianceISO 27001SOC 2Data Protection Impact Assessmentscontract administrationcompliance programmeslegal due diligencerisk managementprivacy documentationregulatory compliance

Soft Skills

written communicationorganizational skillsattention to detailindependent workprofessional judgement

Certifications

CIPP/ECIPMCIPT