Privacy Program Manager

PlayOn•Chamblee, GA

1d•Hybrid

About The Position

We are seeking an experienced and pragmatic Privacy Program Manager to build and lead the Privacy Program across PlayOn Sports. This is a key role in the growing PlayOn Sports Information Security program and requires a privacy SME who will make sure we get it right. You will own PlayOn's privacy program governance by serving as the company's subject matter expert, translating that expertise into program decisions, risk assessments, and remediation work. You report directly to the CISO and will work closely with Legal, Data Governance, Engineering, and external privacy counsel, operating as the expert the business turns to before making decisions that touch personal data. The ideal candidate brings 3–5 years of privacy program experience in a consumer-facing technology environment, has operationalized privacy compliance from the inside (not just read the statutes), understands the practical implications for products that serve minors or schools, and is comfortable working in a model where they own the privacy governance layer while partnering with operational teams throughout the business.

Requirements

3–5 years of privacy program experience at a consumer-facing technology company — operational track record, not just policy or legal advisory.
CCPA compliance experience.
Working knowledge of COPPA and the practical implications for products serving minors or educational institutions.
Experience conducting PIAs and privacy risk assessments that produce actionable decisions, not just documentation.
Familiarity with data mapping and ROPA methodology — you have built or maintained a data inventory before.
Comfortable working in a governance and oversight model — advising and holding partner teams accountable rather than owning every operational process directly.
Strong written communication: clear privacy notices, precise questionnaire responses, no marketing language.
Ability to work across Legal, Data Governance, and Engineering, each with different incentives and vocabulary.
CIPP/US certification or actively pursuing one.
GRC platform familiarity (Vanta, Hyperproof, Drata, or equivalent) — evidence workflows and control mappings.
Experience with additional U.S. state privacy laws (VCDPA, CPA, CTDPA, and others as they apply).

Nice To Haves

COPPA operational experience for student or minor-facing consumer products is strongly preferred.
PCI DSS familiarity is a plus — GoFan processes payment data across ticketing products.

Responsibilities

Own PlayOn's privacy program governance: CCPA, COPPA, and applicable state privacy laws as they apply.
Drive compliance remediation work in partnership with Legal and external privacy counsel.
Conduct Privacy Impact Assessments (PIAs) for new products, features, and vendor relationships, surfacing real risk and driving resolution, not just documenting it.
Maintain Records of Processing Activities (ROPA) and the company-wide data inventory; validate accuracy across all three product platforms.
Oversee privacy processes and ensure activities align with program requirements and are conducted within SLA.
Participate in the Data Privacy Council (DPC) as the privacy program's subject matter expert.
Maintain and update external-facing privacy policies, internal notices, and employee data handling guidelines.
Conduct vendor privacy risk assessments during onboarding and annual vendor reviews.
Support GRC program, including evidence collection for Compliance reports and audits, e.g. SOC 2 Type II.
Own the security questionnaire response process for customer and prospect privacy inquiries.
Track and report privacy program metrics, open risks, and remediation progress to the CISO.