Manager, Privacy, Risk & Controls

Tory Burch • Jersey City, NJ

8d

About The Position

Tory Burch is seeking a Manager, Privacy, Risk & Controls to translate privacy, data protection, governance, PCI, and SOX requirements into practical technical and operational controls. The role sits at the intersection of technology, data, privacy, risk, and control design, and requires hands-on ownership, technical understanding, structured program execution, and coordination across multiple teams.

The manager will own enterprise data mapping, data inventories, and data flow analysis, using OneTrust and direct system analysis to maintain an accurate understanding of how sensitive and regulated data is collected, processed, stored, shared, retained, and disposed of. The role partners with engineering, data, platform, security, legal, and business teams to embed privacy and risk considerations into architecture, design, and implementation decisions, and to identify and mitigate data protection and governance risks.

The position also oversees privacy workflows and technical and operational controls, including consent management, data access, deletion and correction requests, and retention and disposal enforcement. It leads cross-functional control initiatives, validates that controls operate as designed, and supports audits by explaining control intent and operation and ensuring documentation reflects actual practices. The role manages privacy and security tooling, including OneTrust, and works to integrate tools into operational systems and workflows.

Requirements

• Bachelor's degree in technology, information systems, cybersecurity, data management, or a related field, or equivalent practical experience.
• Seven or more years of experience in privacy, security, risk, compliance, data governance, or control-focused roles with meaningful hands-on technical exposure.
• Demonstrated experience translating regulatory, legal, policy, or governance requirements into technical or operational controls.
• Experience owning or materially contributing to enterprise data mapping, data inventories, records of processing, or data flow analysis.
• Strong understanding of privacy and data protection principles, data governance practices, and risk and control concepts.
• Working knowledge of PCI and SOX controls and the ability to assess how controls operate within systems and business processes.
• Experience with OneTrust for data mapping, inventories, assessments, consent, or DSAR workflows.
• Ability to work directly with engineering, data, legal, security, and business teams to understand system behavior, data flows, access models, and implementation constraints.
• Strong program and project management skills, including planning cross-functional work, managing timelines, tracking dependencies, leading working sessions, and driving initiatives to completion.
• Comfort discussing systems, integrations, access controls, data pipelines, cloud platforms, and technical control operation with engineering teams.
• Strong written and verbal communication skills, including the ability to explain risk, control intent, technical implementation details, and execution status to technical and legal stakeholders.

Nice To Haves

• Experience with complementary data discovery, classification, or governance tooling.
• Professional certifications such as CIPM, CIPT, CDPSE, or comparable credentials, particularly those demonstrating applied experience operationalizing privacy and data protection requirements.

Responsibilities

• Own enterprise data mapping, data inventories, and data flow analysis using OneTrust and direct system analysis; maintain an understanding of how sensitive and regulated data is collected, processed, stored, shared, retained, and disposed of.
• Translate legal, regulatory, policy, and governance requirements into technical and operational control requirements that teams can implement.
• Work with engineering, data, platform, security, legal, and business teams to understand system behavior, data pipelines, integration points, access models, control points, and implementation constraints.
• Identify privacy, data protection, and data governance risks; define practical mitigation approaches and drive identified gaps to closure.
• Lead and participate in privacy working sessions and committee meetings with the General Counsel and internal and external privacy and compliance counsel; maintain agendas, document decisions, track actions, and drive follow-up to completion.
• Drive implementation and continuous improvement of privacy workflows, including consent management; data access, deletion, and correction requests; and data retention and disposal enforcement.
• Lead and validate data discovery, classification, and inventory efforts across systems and platforms; partner with identity and platform teams to align access controls with data sensitivity and applicable requirements.
• Represent privacy, risk, and controls in architecture and change reviews; identify data protection risks, required control behaviors, and delivery dependencies early in the lifecycle.
• Design, implement, and oversee technical and operational controls supporting privacy, data protection, governance, PCI, and SOX; explain how controls function and reduce risk.
• Manage control-related initiatives as structured programs by defining scope, milestones, owners, dependencies, evidence, and success criteria, and tracking progress through completion.
• Work with privacy and security tools, including OneTrust, consent management platforms, data discovery and classification technologies, and DSAR solutions, to integrate them into operational systems and workflows.
• Perform targeted control reviews to confirm controls are implemented, operating as designed, and producing expected outcomes; support audits by explaining control intent and operation and ensuring documentation reflects actual practices.

Benefits

• Generous benefits to support health, financial security, and wellness.
• Competitive pay and rewards for high performance.
• Employee discount and access to exclusive sample sales.
• On-demand executive coaching.
• Paid volunteer days and opportunities to give back through the Tory Burch Foundation.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager