Manager, Privacy, Risk & Controls

Tory Burch • Jersey City, NJ

10d • $140,000 - $180,000

About The Position

The Manager, Privacy, Risk & Controls translates privacy, data protection, governance, PCI, and SOX requirements into practical technical and operational controls. The role partners with engineering, data, platform, security, legal, and business teams to embed privacy and risk considerations into architecture, design, and implementation decisions. It owns enterprise data mapping, data inventories, and data flow analysis, maintaining an accurate view of how sensitive and regulated data is collected, processed, stored, shared, retained, and disposed of. The role also identifies and manages data protection and governance risks, drives control implementation and improvement, and manages privacy and security tooling such as OneTrust as part of operational systems and workflows.

The position combines hands-on control ownership and technical understanding with structured program execution and cross-functional follow-through. It includes leading privacy working sessions and committee meetings with the General Counsel and privacy and compliance counsel, managing privacy workflows, serving as a privacy and risk voice in architecture and change reviews, and validating that controls operate as designed. The role supports audits by explaining control intent and operation and ensuring documentation reflects actual practices.

Tory Burch describes its Technology team as enabling efficient business operations, growth, and profitability through modernization, data analytics, and customer experience improvements. The compensation range is $140,000–$180,000 USD, with offers based on relevant experience and work location.

Requirements

• Bachelor’s degree in technology, information systems, cybersecurity, data management, or a related field, or equivalent practical experience.
• Seven or more years of experience in privacy, security, risk, compliance, data governance, or control-focused roles with meaningful hands-on technical exposure.
• Demonstrated experience translating regulatory, legal, policy, or governance requirements into technical or operational controls.
• Experience owning or materially contributing to enterprise data mapping, data inventories, records of processing, or data flow analysis.
• Strong understanding of privacy and data protection principles, data governance practices, and risk and control concepts.
• Working knowledge of PCI and SOX controls and ability to assess how controls operate within systems and business processes.
• Experience with OneTrust for data mapping, inventories, assessments, consent, or DSAR workflows.
• Ability to work directly with engineering, data, legal, security, and business teams to understand system behavior, data flows, access models, and implementation constraints.
• Strong program and project management skills, including planning cross-functional work, managing timelines, tracking dependencies, leading working sessions, and driving initiatives to completion.
• Comfort discussing systems, integrations, access controls, data pipelines, cloud platforms, and technical control operation with engineering teams.
• Strong written and verbal communication skills, including the ability to explain risk, control intent, technical implementation details, and execution status to technical and legal stakeholders.

Nice To Haves

• Experience with complementary data discovery, classification, or governance tooling.
• Professional certifications such as Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), Certified Data Privacy Solutions Engineer (CDPSE), or comparable credentials, particularly credentials demonstrating applied experience operationalizing privacy and data protection requirements.

Responsibilities

• Own enterprise data mapping, data inventories, and data flow analysis using OneTrust and direct system analysis.
• Maintain an accurate understanding of how sensitive and regulated data is collected, processed, stored, shared, retained, and disposed of.
• Translate legal, regulatory, policy, and governance requirements into technical and operational control requirements that teams can implement.
• Work with engineering, data, platform, security, legal, and business teams to understand system behavior, data pipelines, integration points, access models, control points, and implementation constraints.
• Identify privacy, data protection, and data governance risks; define mitigations and drive identified gaps to closure.
• Lead and participate in privacy working sessions and privacy committee meetings with the General Counsel and internal and external privacy and compliance counsel; maintain agendas, document decisions, track actions, and drive follow-up to completion.
• Drive implementation and continuous improvement of privacy workflows, including consent management; data access, deletion, and correction requests; and data retention and disposal enforcement.
• Lead and validate data discovery, classification, and inventory efforts across systems and platforms; partner with identity and platform teams to align access controls with data sensitivity and applicable requirements.
• Represent privacy, risk, and controls in architecture and change reviews; identify data protection risks, required control behaviors, and delivery dependencies early.
• Design, implement, and oversee technical and operational controls for privacy, data protection, governance, PCI, and SOX, and explain how they work and reduce risk.
• Manage control-related initiatives as structured programs by defining scope, milestones, owners, dependencies, evidence, and success criteria, and tracking progress through completion.
• Work with privacy and security tooling, including OneTrust, consent management platforms, data discovery and classification technologies, and DSAR solutions, to integrate tools into operational systems and workflows.
• Perform targeted control reviews to confirm controls are implemented, operating as designed, and producing expected outcomes.
• Support audits by explaining control intent and operation and ensuring documentation reflects actual practices.

Benefits

• Generous benefits supporting mental and physical health, financial security, and wellness.
• Competitive pay and rewards for high performance.
• Employee discount and access to exclusive sample sales.
• Free on-demand executive coaching.
• Paid volunteer days and opportunities to give back through the Tory Burch Foundation.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager