Overview
In this role you own privacy programs at scale, driving end-to-end management of data subject requests, PIAs/DPIAs, ROPA, TIAs, and cookie compliance. You’ll partner with Privacy Legal and Privacy Engineering to keep operations regulatory-ready and auditable, while identifying automation opportunities and building scalable documentation and tooling. You’ll serve as a key connector for cross-functional teams, translating global privacy requirements into practical, repeatable workflows. This is an opportunity to shape Stripe’s privacy operations at scale and support regulators with clear, auditable records.
Responsibilities
- Own end-to-end program management for core privacy programs (DSRs, PIAs/DPIAs, ROPA, TIAs, cookie compliance) ensuring regulatory readiness and auditability
- Identify process improvements and leverage AI tooling to automate routine tasks while maintaining quality
- Create and maintain auditable privacy documentation, playbooks, and customer response libraries for scalable support
- Collaborate with Privacy Legal and Privacy Engineering to deepen privacy expertise and escalate complex requests with context
- Rotate as primary contact for incoming privacy requests, managing intake channels and Jira run tickets
Key requirements
- 5+ years of privacy program management and scaling cross-functional programs
- Excellent collaboration and communication skills; ability to explain complex ideas clearly
- Experience with GDPR, CCPA, LGPD, PIPEDA; knowledge of US state laws, HIPAA, GLBA is a plus
- Hands-on experience with PIAs/DPIAs, DSR workflows, and ROPA
- Ability to analyze complex problems, identify root causes, and document narratives simply
- Curious, self-motivated, strategic problem solver with capacity to handle multiple projects in a fast-paced environment
- Team player willing to pitch in as needed
- Preferred: AI tooling experience, third-party risk management, privacy certifications like CIPP/E, CIPM
- Preferred: experience in fast-growing tech environments
- collaboration
- clear communication
- relationship-building
- PIA/DPIA execution
- DSR workflows
- ROPA management
…
