[Hiring] Senior Manager, Privacy @Step Up For Students

Role Description

The Senior Manager, Privacy plays a critical leadership role in establishing, implementing, and managing Step Up for Students' enterprise privacy program. This position is responsible for developing and maintaining privacy governance frameworks, policies, controls, and processes that support the protection of sensitive organizational, employee, and family data while ensuring compliance with applicable privacy laws, regulations, and industry standards.

• Serve as the organization's subject matter expert (SME) for privacy risk management.
• Collaborate closely with Information Technology, Information Security, Compliance, Legal, Internal Audit, Product, Operations, and business leaders.
• Identify and assess privacy risks, monitor compliance requirements, and support investigations.
• Oversee privacy-related incidents and implement privacy controls that align with organizational objectives.
• Support enterprise readiness initiatives, including privacy assessments, audit activities, risk evaluations, and SOC 2 readiness efforts.
• Translate complex privacy requirements into practical and scalable business solutions.

Qualifications

• Bachelor's degree in Information Security, Information Systems, Cybersecurity, Business Administration, Risk Management, Legal Studies, Compliance, or a related field.
• Equivalent professional experience may be considered in lieu of formal education.
• Minimum of 8-10 years of progressive experience in privacy, compliance, risk management, information security, audit, governance, or related disciplines.
• Proven experience designing, implementing, or managing enterprise privacy programs and privacy governance frameworks.
• Experience conducting privacy risk assessments and developing privacy control strategies.
• Strong knowledge of federal, state, and industry privacy and data protection laws, regulations, and standards.
• Experience supporting audits, assessments, and compliance reviews.

Requirements

• Experience working cross-functionally with technology, legal, compliance, risk, and operational business partners.
• Experience supporting compliance with privacy regulations such as FERPA, HIPAA, CCPA, COPPA, PPRA, and other applicable privacy and data protection requirements.
• Experience supporting data governance, cybersecurity, risk management, or compliance initiatives.
• Experience supporting SOC 2 readiness initiatives and related compliance programs.
• Experience evaluating or implementing Governance, Risk, and Compliance (GRC) tools and privacy management technologies.
• Professional certifications such as CIPP, CIPM, CIPT, CISSP, CRISC, or related certifications.

Benefits

• Deep knowledge of privacy governance, privacy frameworks, and applicable federal, state, and industry privacy regulations.
• Strong understanding of risk management, compliance, internal controls, and regulatory requirements.
• Ability to assess complex privacy risks and develop practical risk mitigation strategies.
• Strong analytical, problem-solving, and critical-thinking skills.
• Ability to influence stakeholders and drive cross-functional collaboration.
• Strong project management and organizational skills.
• Excellent written and verbal communication skills, including executive-level reporting and presentations.
• Self-motivated and capable of managing multiple priorities in a fast-paced and evolving environment.
• Strong attention to detail and commitment to maintaining confidentiality and data protection standards.
• Ability to build and foster strong business partnerships throughout the organization.

Core Values

• Everyone is an asset.
• Every event is an improvement opportunity.

Working Conditions/Equipment Use

• Home Work is performed indoors in a typical office environment - not substantially exposed to adverse environmental conditions.
• Must be able to lift up to fifteen (15) pounds.
• Frequent use of office machines to include telephone, computer, and printer.