[Hiring] Senior Privacy Program Manager @BILL

Role Description

BILL is looking for a tech-savvy Sr. Privacy Program Manager to help scale privacy operations across the Legal and Compliance team. This person will own key parts of BILL's privacy program and work closely with Product, Engineering, Information Security, CX, and Procurement.

The Sr. Privacy Program Manager reports to the Director, Legal and helps set and carry out BILL's privacy strategy. They will own privacy impact assessments, data subject requests, and vendor privacy reviews. They will also look for ways to make the program more efficient, including through smart use of automation and AI tools.

What You Will Do

• Own and scale core parts of BILL's privacy and data governance program.
• Serve as the primary point of contact for privacy escalations, data subject requests, and privacy questions from across the company.
• Own the DSAR program end to end, including intake, tracking, fulfillment, metrics, and process improvements in partnership with CX.
• Lead privacy impact assessments for new products, features, and vendors that process personal data.
• Run privacy reviews for AI features and internal AI tool adoption, working with Legal, InfoSec, and Product.
• Build and maintain data maps and records of processing, and stay current on company systems that hold personal data.
• Develop and deliver privacy training for employees and specific teams.
• Draft and maintain privacy policies, procedures, and standard operating procedures.
• Monitor changes to privacy laws and regulations (CCPA/CPRA, US state privacy laws, GDPR, and emerging AI rules) and explain what they mean for the business.
• Find and roll out automation and AI tools that make privacy operations more efficient and scalable.
• Track and report privacy program metrics to Legal leadership.

Qualifications

• 7+ years of experience in privacy, compliance, or technology program management, including at least 4 to 5 years focused on privacy program operations (DSARs, PIAs/DPIAs, TIAs, ROPAs, vendor privacy reviews, cookie consent management, etc.). Experience at a software, fintech, or payments company preferred.
• Working knowledge of CCPA/CPRA, US state privacy laws, GLBA, GDPR, HIPAA.
• Hands-on experience using AI tools (such as Claude, ChatGPT, Gemini, GC.ai, or Harvey) in daily work, for example to draft documents, summarize regulations, review contracts, or speed up assessments and request workflows. Candidates should be ready to share specific examples.
• Familiarity with privacy risks tied to AI, such as training data use, model inputs and outputs, and vendor AI terms, and experience assessing them.
• Experience with privacy tech platforms (such as OneTrust, Transcend, or TrustArc).
• Ability to work with all levels of management, multiple geographies, subject matter experts, legal staff, vendors, and customers.
• Ability to pull together information from many sources and present it clearly and concisely.
• Strong written and verbal communication skills.
• Self-starter who spots issues and opportunities early and recommends actions.
• Strong prioritization, organization, and follow-through in a fast-paced environment.
• Works well as part of a team.
• Bachelor's degree.
• CIPP/US, CIPP/E, CIPM, or CIPT certification preferred. JD a plus, not required.

Requirements

• Visa Sponsorship: Please note that this position is not eligible for visa sponsorship. Applicants must have authorization to work in the United States without requiring visa sponsorship now or in the future.

Benefits

• 100% paid employee health, dental, and vision plans (choose HMO, PPO, or HDHP).
• HSA & FSA accounts.
• Life Insurance, Long & Short-term disability coverage.
• Employee Assistance Program (EAP).
• 11+ Observed holidays and wellness days and flexible time off.
• Employee Stock Purchase Program with employee discounts.
• Wellness & Fitness initiatives.
• Employee recognition and referral programs.
• And much more.