Privacy & Security Program Manager

Nanit•New York, NY

3d•$130,000 - $150,000•Hybrid

About The Position

Nanit is seeking a highly motivated and detail-oriented privacy and security professional to lead and evolve its privacy and security compliance program. This role will involve building and operationalizing policies, controls, and processes to protect customer data and ensure compliance with evolving regulations. The position requires close collaboration with Legal, Product, Engineering, and business teams to integrate privacy and security best practices into Nanit's operations.

Requirements

Bachelor's degree in a related field.
3-5+ years of experience in privacy program management, information security, or a related compliance function, ideally spanning both in-house and cross-functional environments.
Hands-on experience supporting or operating privacy and/or security programs aligned to frameworks such as SOC 2, ISO 27001/27701, NIST CSF, or similar.
Working knowledge of consumer privacy laws (e.g., CCPA/CPRA, GDPR, COPPA).
Practical experience with, or exposure to, security incident response, vendor risk management, and identity/access management concepts across on-premise and cloud environments.
Able to rapidly interpret relevant laws, regulations, and technical requirements, and translate them into practical, actionable, and business-friendly guidance.
Excellent stakeholder management, communication, and collaboration skills; able to explain complex privacy/security concepts to both technical and non-technical audiences.
Strong organizational skills, a problem-solving mindset, attention to detail, and the ability to exercise sound judgment in ambiguous environments.
Strong technical orientation with an understanding of modern cloud architectures and data flows, and the ability to leverage emerging technologies and AI-powered tools to strengthen privacy, security, and compliance programs.

Nice To Haves

Relevant certifications (e.g., CIPP, CIPM, CISSP, CIPT, CISM) preferred.
A willingness to build deeper subject-matter expertise in consumer privacy laws over time.
Preference for East Coast candidates.

Responsibilities

Develop, maintain, and implement Nanit's privacy and security policies, standards, and processes to ensure compliance with applicable laws, regulations, and industry frameworks (e.g., CCPA/CPRA, GDPR, COPPA, SOC 2, ISO 27001).
Conduct and support regular privacy and security risk assessments, audits, and gap analyses across systems, vendors, products, and business processes, and drive remediation of identified gaps.
Collaborate with stakeholders across the organization to assess AI-related privacy, security, and compliance risks.
Manage the third-party/vendor risk management program, including privacy and security due diligence, contract review support, ongoing monitoring, and enforcement of Nanit's data protection requirements.
Partner with Product and Engineering teams to embed privacy-by-design and security-by-design principles into new features and products, including data mapping, privacy impact assessments (PIAs/DPIAs), and secure development practices.
Monitor emerging privacy and security regulatory developments and industry standards, and advise senior leadership on impact and required actions.
Lead the company's response to security and privacy inquiries from customers, partners, and regulators, including questionnaires, audits, and due diligence requests.
Support incident response efforts for privacy and security incidents, including investigation, documentation, remediation tracking, and stakeholder communication.
Develop and deliver privacy and security metrics, dashboards, and reporting for senior management and the board of directors.
Design and deliver company-wide training and awareness programs on privacy, data security, and compliance best practices.
Act as a thoughtful business partner who supports a fast-moving culture, flexible teamwork, and pragmatic, scalable solutions that support growth while protecting the company.