Note: The job is a remote job and is open to candidates in USA. Elevate Legal Talent is a global leader in software, data, and technology solutions, seeking an experienced Privacy Operations Manager to join its General Counsel function. The role involves leading a team to implement privacy policies, manage day-to-day operations, and ensure compliance with global regulations.
Responsibilities
- Own day-to-day execution of the global privacy program
- Implement scalable policies, processes, and operational frameworks
- Lead privacy assessments (PIAs, DPIAs, TIAs)
- Oversee DSAR intake, tracking, and resolution
- Report on KPIs, metrics, and program maturity
- Monitor and operationalize compliance across global, regional, and sector-specific regulations, including: GDPR, UK GDPR, NIS2, Digital Services Act (DSA), Digital Markets Act (DMA), CCPA/CPRA, PIPEDA, Quebec Law 25, HIPAA, GLBA, FedRAMP, CJIS, and other applicable frameworks
- Translate regulatory requirements into scalable operational processes and system-level controls
- Build and maintain data inventories and data maps
- Identify privacy risks and drive mitigation strategies
- Support incident response and breach notification processes
- Conduct internal and vendor privacy audits
- Partner with Legal, Security, IT, and Product teams
- Embed privacy-by-design into systems and processes
- Deliver privacy guidance and training to business stakeholders
- Manage vendor privacy obligations and sub-processor tracking
- Maintain ROPA and privacy documentation
- Create operational playbooks and workflows
- Prepare reporting for leadership and audits
- Support regulatory inquiries
- Lead and mentor Privacy Operations Specialists
- Drive accountability, performance, and career growth
- Improve workflows and operational scalability
- Align team priorities with business and compliance goals
Skills
- Bachelor's degree in Law, Information Systems, Computer Science, Cybersecurity, or a related technical or legal discipline
- 6–8 years of professional experience in privacy, cybersecurity, or compliance roles within a technical environment, ideally in a SaaS organization, including 3–5 years of leadership/people management experience
- Industry-recognized privacy or security certifications such as IAPP (CIPM, CIPT) or CISSP
- Hands-on experience conducting technical privacy risk assessments and evaluations
- Strong expertise (3+ years) administering and configuring OneTrust or similar privacy platforms, including modules for assessments, data mapping, consent tracking, and DSAR workflows
- Deep understanding of global data protection regulations, including GDPR, CCPA, PIPEDA, and comparable frameworks
- Ability to translate regulatory and legal requirements into technical controls and system implementations
- Proven experience partnering with product and engineering teams to embed privacy-by-design principles, particularly when handling sensitive or regulated data
- Working knowledge of data classification standards, retention policies, and data lifecycle practices
- Experience overseeing privacy operations within large, complex organizations
- Advanced degree in legal studies or a Juris Doctor (JD)
- Project management experience and/or relevant certification (e.g., PMP, Agile)
- Experience leveraging automation tools such as Power BI, Power Automate, or similar platforms, along with exposure to AI/ML applications in compliance or privacy operations
- Familiarity with data governance platforms, SIEM solutions, and privacy-enhancing technologies (PETs)
- Advanced experience (5+ years) working with OneTrust, including customization and optimization of assessments, data inventory, consent management, and DSAR processes
- Proficiency in scripting or developing automation solutions
Benefits
- W2 option
- Elevate's curated training suite to enhance and develop your skills
- Access to hands-on support, networking opportunities, and accessing the most up-to-date resources
- Opportunity to work with our best top law firms and law department customers
Company Overview
ElevateFlex (flexible legal resourcing) and Elevate (the law company) create a unique combination. It was founded in undefined, and is headquartered in Global, US, with a workforce of 1001-5000 employees. Its website is https://elevate.law/elevateflex/.