Privacy Program Manager

Upgrade is a fintech company that provides affordable and responsible credit, mobile banking, and payment products to everyday consumers. We were the fastest growing company in the Americas last year according to the Financial Times and Upgrade Card was the fastest growing credit card in America. We have delivered over $21 billion in affordable and responsible credit over the last 5 years. The company is backed by some of the most prominent technology investors and was recently valued at $6.3B.

We have built an energizing, collaborative and inclusive culture where team members help each other, learn and innovate to move the company and its customers in the right direction, and own the outcome of their efforts.

Upgrade has been named a “Best Place to Work in the Bay Area” three years in a row, “Top Companies to work for in Arizona” and one of the "Best Engineering Department" awarded annually by Comparably. We've also received recognition for being a best company for Diversity, Women, Culture, and Veterans.

We are looking for new team members who get excited about designing and delivering new and better products to join a team of 1500 talented and dedicated professionals. Come join us if you like to tackle big problems and make a meaningful difference in people's lives.

About the Role:

We’re seeking a Privacy Program Manager to help mature and manage our privacy program. Reporting to the Legal Director, Privacy, this role will provide comprehensive support for operationalizing privacy requirements for various business teams. Partnering with cross-functional stakeholders across the company, this role will help develop and implement our privacy controls framework.

 

What You’ll Do: 

• Support the implementation of privacy, security, and data governance requirements and best practices and ensure operational effectiveness of policies, procedures, and controls
• Work closely with a variety of cross-functional stakeholders
• Bridge communication with both technical engineering and business teams to connect legal requirements with implementation of business requirements
• Scope, manage, and drive to completion the end-to-end delivery of compliance projects with excellent project management skills
• Identify, drive, and manage privacy program maturation, including mapping policies, standards, guidelines, and controls against internationally recognized data and privacy standards such as ISO, GAAP, and NIST
• Develop, maintain, and track meaningful metrics to gauge the effectiveness of the program and prepare reports on progress of key deliverables for multiple stakeholders
• Work with business teams to complete relevant privacy assessments for any new or existing systems, products, or business processes involving personal information
• Keep track of evolving privacy and data protection laws

 

What We Look For:

• 3-5+ years of operational, in-house experience implementing privacy and data governance initiatives with an emphasis on programmatic compliance
• Technical Program Management (TPM) or other engineering/technology background is a plus
• Certifications such as CIPP, CIPM, or CIPT and/or PMP are preferred
• Strong, demonstrable experience leading organizational change and end-to-end project management
• Experience managing projects across cross-functional teams, building scalable and sustainable processes
• Ability to take large, complex projects/problems and break them up into pieces, with deep technical, project, and program management expertise
• Ability to coordinate cross-functionally, including with outside vendors, on issues related to privacy, information security, product development, compliance requirements, and other technology initiatives
• Excellent communication, interpersonal, organizational, and writing skills, including project plan creation and management, status and result reporting, and effective training presentations
• Demonstrable knowledge of compliance methods, standards, processes, governance models, and industry standard compliance frameworks
• Proven track record of leading large, complex programs/projects, including experience supporting compliance initiatives for global privacy and regulatory frameworks, such as GDPR, CCPA
• Strong working knowledge of relevant financial privacy and data protection laws, regulations, and industry standards, including, GLBA, FCRA, CCPA, CalFIPA, NY DFS cybersecurity regulation, PCI DSS, and others
• BS/BA degree or equivalent experience in relevant fields such as law, privacy, information security, information technology, or related discipline

 

What We Offer You: 

• Competitive salary and stoc