Privacy & Compliance Program Manager

ICW Group•San Diego, CA

4d•$119,749 - $201,948•Hybrid

About The Position

The purpose of this role is to provide analysis, guidance, and direction for the management and resolution of corporate compliance and privacy-related matters. Reporting to the Director of Corporate Compliance, this position works closely with leaders in Law and Corporate Compliance and serves as a key resource for leaders and team members throughout the organization on privacy program requirements and corporate compliance functions.

Requirements

Bachelor’s degree (or equivalent combination of education and experience) required.
4+ years’ related experience required in privacy, corporate compliance or closely related area.
Substantial, direct experience interpreting legal requirements for privacy program management and providing practical management-level guidance on consumer privacy and cybersecurity laws and regulations.
Excellent computer skills, including familiarity with corporate cybersecurity practices and an interest in AI governance.
Familiarity with general corporate compliance functions, such as corporate policy management, conflict of interest principles, and compliance risk assessments.
Superior legal research and analytical skills, with careful attention to detail and the ability to provide guidance in complex, ambiguous situations.
Proven ability to translate complex statutory language into plain English reports, process guidance, policy statements, and training materials.
Demonstrated ability to work without relying on AI to produce high caliber analyses and written work product.
Excellent communication skills, including experience leading cross-functional meetings and presenting reports to leadership.
Strong problem-resolution skills, including experience with internal investigations and balancing compliance risk management needs with corporate priorities.
Client-oriented perspective, with a focus on timely, actionable guidance that responds to business needs.
Comfortable working in a growth-oriented environment with evolving regulatory requirements, uncertain legal interpretations, and organizational change.
Well-developed self-management skills, with the ability to work independently with minimal guidance, take direction from management, and collaborate effectively with individuals from diverse backgrounds.
Proven ability to oversee the work of others, provide guidance and feedback, and recognize when issues should be escalated to department leadership.
Executive presence, sound judgment, and demonstrated ability to handle sensitive matters respectfully, ethically, and with discretion.
Good interpersonal skills, with the ability to build cross-functional relationships, set direction, and develop consensus in support of organizational goals.

Nice To Haves

Juris Doctorate (JD) preferred.
Insurance industry experience is helpful.
Certified Information Privacy Professional (CIPP) a plus.
GRC systems experience is helpful.
Experience in business management, insurance operations, contract interpretation, employment law, sanctions compliance, or corporate governance is helpful.

Responsibilities

Manages the company’s privacy program (under the direction of the department director), partnering with Information Security, insurance operations, finance, purchasing and vendor management, human resources, and other departments on privacy and cybersecurity compliance.
Oversees data events and incident response processes to support timely and appropriate resolution.
Maintains up to date knowledge of applicable privacy, AI, cybersecurity, data classification, data retention, and data protection laws and regulations across the U.S.
Supports general corporate compliance functions, including corporate policy management, conflict of interest administration, compliance risk assessments, data management, regulatory change management, compliance training, team member awareness, and enterprise-level compliance risk management.
Develops compliance workflows, key risk indicators, and metrics to support compliance risk management, regulatory readiness, and program maturity.
Participates in the development and drafting of corporate policies and policy-related materials, without use of AI.
Prepares departmental and executive-level reports on compliance risk management and assigned program activities.
Interprets corporate policies, frameworks, and process documents within assigned areas of responsibility.
Promotes responsible innovation, practical compliance risk management, and accountable data management across the organization.
Mentors and assists in supervising the work of less experienced members of the department.