Stripe

Program Manager, Privacy GRC

Stripe

full-time

Posted on:

Origin:  • 🇺🇸 United States • California, Illinois, New York, Washington

Visit company website
AI Apply
Apply

Job Level

Mid-LevelSenior

About the role

  • Work across a spectrum of privacy topics and manage privacy programs/projects end to end to ensure operational excellence and compliance with applicable data protection and privacy laws.
  • Develop and maintain comprehensive privacy governance, risk, and compliance documentation to facilitate reliable and scalable compliance.
  • Maintain a detailed privacy risk registry to ensure effective and scalable management of global and org-wide privacy risks.
  • Design and maintain rigorous testing protocols for privacy controls to assess their effectiveness.
  • Collaborate with cross-functional teams to ensure alignment with relevant organizational policies and regulatory requirements.
  • Conduct on-going reviews and updates of privacy documentation to reflect adopted frameworks, changes in laws, regulations, or changes in internal practices.
  • Manage privacy-driven programs end to end to ensure regulatory readiness and compliance.
  • Continuously improve user-facing workflows to ensure operational streamlining for existing and new privacy laws and regulations.
  • Leverage deep privacy expertise to collaborate with internal partners and users in complex user conversations.
  • Create and maintain internal and external documentation to provide scalable privacy support and resources.
  • Work closely with other members of Stripe’s Legal team to fulfill user requests and to build and deepen expertise on global privacy and data protection requirements.
  • Be a strong advocate for a privacy mindset while working with product, engineering, and other internal partners.
  • Work cross-functionally across the Product and Tech orgs to advocate for, advise, and help implement a privacy-by-design approach to the Product development life cycle.

Requirements

  • 5+ years of demonstrated privacy program management with a proven track record for operationalizing and scaling cross-functional organisation-wide programs.
  • Excellent collaboration, communication, and relationship building skills and the ability to convey complex ideas succinctly to varying levels of audiences.
  • Curious and self-motivated with a strong affinity for vision setting, strategic problem solving, and driving action.
  • Experienced in juggling multiple projects in a fast-paced, high-growth environment, within tight timelines and shifting priorities.
  • Organized, with strong project management skills and the ability to work well on both long and short-term projects; willingness to partner on a wide range of projects.
  • Experienced with GDPR, CCPA, and other privacy regulations is a plus.
  • Strong background in controls and compliance demonstrating expertise in implementing and assessing internal controls within complex regulatory environments.
  • Extensive ROPA, PIA/DPIA compliance documentation experience.
  • CIPP, CIPM or equivalent privacy certification.
  • Based in the SF Bay Area, Seattle, Chicago or New York City.