Privacy GRC Program Manager

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

About the team

Stripe is increasing the GDP of the internet and we are looking for a program manager for Stripe’s Privacy Legal team. In this role you will work closely with members of Stripe’s privacy legal team and cross-functional privacy teams to ensure operational excellence and compliance with applicable data protection and privacy laws. A successful candidate thrives in a fast-paced and collaborative environment and is excited to solve complex problems.

What you’ll do

Work across a spectrum of privacy topics and manage privacy programs/projects end to end to ensure operational excellence and compliance with various aspects of applicable data protection and privacy laws. 

Responsibilities 

Privacy Governance, Risk, and Compliance

• Develop and maintain comprehensive privacy governance, risk, and compliance documentation to facilitate reliable and scalable compliance.
• Maintain a detailed privacy risk registry to ensure effective and scalable management of global and org-wide privacy risks.
• Design and maintain rigorous testing protocols for privacy controls to assess their effectiveness.
• Collaborate with cross-functional teams to ensure alignment with relevant organizational policies and regulatory requirements.
• Conduct on-going reviews and updates of privacy documentation to reflect adopted frameworks, changes in laws, regulations, or changes in internal practices.

Privacy Operations 

• Manage privacy-driven programs end to end to ensure regulatory readiness and compliance. 
• Continuously improve user-facing workflows to ensure operational streamlining for existing and new privacy laws and regulations.
• Leverage your deep privacy expertise to collaborate with internal partners and users in complex user conversations. 
• Create and maintain internal and external documentation to provide scalable privacy support and resources.
• Work closely with other members of Stripe’s Legal team to fulfill user requests and to build and deepen your expertise on global privacy and data protection requirements.
• Be a strong advocate for a privacy mindset while working with product, engineering, and other internal partners.
• Work cross-functionally across the Product and Tech orgs to advocate for, advise, and help implement a privacy-by-design approach to the Product development life cycle. 

Who you are

We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

• 5+ years of demonstrated privacy program management with a proven track record for operationalizing and scaling cross-functional organisation-wide programs. 
• Excellent collaboration, communication, and relationship building skills and the ability to convey complex ideas succinctly to varying levels of audiences.
• Curious and self-motivated with a strong affinity for vision setting, strategic problem solving, and driving action.
• Experienced in juggling multiple projects in a fast-paced, high-growth environment, within tight timelines and shifting priorities.
• Organized, with strong project management skills and the ability to work well on both long and short-term projects; willingness to partner on a wide range of projects.
• Experienced with GDPR, CCPA, and other privacy regulations is a plus.

Preferred qualifications

• Strong background in controls and compliance demonstrating expertise in implementing and assessing internal controls within complex regulatory environments.
• Extensive ROPA, PIA/DPIA compliance documentation experience. 
• CIPP, CIPM or equivalent privacy certification.
• Based in the SF Bay Area, Seattle, Chicago or New York City.