Program Manager (Privacy and Security)

About the Role

• We’re looking for a hard-working, self-starter to serve as our Program Manager (Privacy and Security) who is interested in privacy, data security, and technology. You will work on meaningful and mission-critical privacy and data protection projects to protect data and to ensure organizational compliance with privacy laws and regulations.
• You will have responsibility for ensuring that Calm’s data governance practices are robust and are consistent with best practices. This role will report to the Head of Trust, Privacy & Intellectual Property, and will work with cross-functional stakeholders in the organization, including members of the product, engineering, security, and operations teams.

Outcomes 

• On a daily basis, work on and help drive multiple privacy-related work streams related to ensuring compliance with privacy laws and regulations, including CCPA and GDPR, in collaboration with cross-functional stakeholders
• Assist in the review and assessment of new products, features, and uses of personal data to ensure compliance with data privacy laws and regulations and industry best practices
• Support security-related work streams, including obtaining and maintaining SOC 2 certification
• Assist with maintaining and updating privacy notices as required and appropriate
• Partner with customer experience team in actioning privacy rights requests and refining policies and procedures related to rights requests
• Monitor and anticipate privacy-related regulatory developments and help implement any changes required by new privacy laws or regulations
• Opportunity to work on other complex matters that a sophisticated in-house legal team advises on

Competencies 

• 3-7 years of overall professional experience
• A highly motivated self-starter who thrives in a fast-paced environment
• Excellent organizational skills and attention to the right details
• Excellent communication and interpersonal skills
• High energy, team-oriented and enjoys helping others
• A can-do attitude and ability to efficiently and effectively manage competing projects and priorities
• Passionate about privacy, security, and technology
• Strong critical thinking skills and intellectually curious

Nice-to-Haves

• Relevant work experience involving: privacy laws and regulations, including CCPA, GDPR, and COPPA; and/or cybersecurity, including security standards such as SOC2 and ISO 27001
• Project management experience
• STEM major or coursework related to technology