Senior Privacy Program Manager
About The Position
Clay is seeking a Senior Privacy Program Manager to build and run its privacy program, including the operational side of AI governance. The role reports to the Head of Product, Privacy & AI Legal and works closely with Product, Engineering, Data Platform, Data Partnerships, Security, Marketing, and Sales. Legal sets privacy and AI standards and makes legal determinations; this position turns those standards into practical processes, records, and tools that support Clay’s pace of development. The manager will connect privacy work across Clay into a coordinated program with clear ownership, reliable operations, and defensible evidence. The role also focuses on automating routine work so Product and Engineering teams can focus on building. Responsibilities include program planning, processing records and data inventory requirements, privacy and AI assessments, product-development reviews, AI governance records and evidence, provider and vendor diligence, privacy rights requests, retention and deletion operations, accurate public commitments, incident-response support, training, and program metrics.
Requirements
- 6 to 8+ years building and running privacy programs or privacy operations at a technology company, ideally in high-growth B2B SaaS, data, or AI.
- Hands-on experience with privacy requests, data mapping, PIAs and DPIAs, vendor diligence, and consent management.
- Working knowledge of GDPR, UK GDPR, CCPA/CPRA, and other US state privacy laws, with sound judgment about when to involve Legal.
- AI fluency, including understanding how LLM features and agents use data and ability to put frameworks such as the EU AI Act into practice.
- Technical fluency to follow data across systems and APIs and ask engineers precise questions.
- Track record of building a program from scratch and securing adoption among teams that do not report to you.
- Clear, plain-language writing and a habit of using AI and automation to eliminate routine work.
- CIPM or equivalent certification.
Nice To Haves
- CIPP/E, CIPP/US, CIPT, or AIGP certification.
- Hands-on AI governance experience, such as AI inventories, AI impact assessments, ISO/IEC 42001, or the NIST AI RMF.
- Experience at a B2B data or enrichment company, or with data partnerships and licensing.
- Experience with Transcend, OneTrust, DataGrail, or similar tools.
- Experience with Clay or building go-to-market workflows.
Responsibilities
- Turn Legal’s privacy strategy into a prioritized program plan with owners, dependencies, and six- and twelve-month outcomes; flag gaps in ownership or capacity early.
- Maintain records of processing for Clay’s product and operations, and define privacy requirements for the GRC team’s data inventory, including sources, uses, recipients, storage, retention, and restrictions.
- Run PIAs, DPIAs, transfer assessments, legitimate interests assessments, and AI assessments from fact gathering through follow-up; escalate legal determinations to Legal.
- Help operate privacy and AI review within the product development process so teams receive timely, consistent guidance and questions reach Legal early.
- Maintain records of AI use in Clay products and internal tools; gather evidence about controls for agent features and keep review conditions and customer guidance current as models and permissions change.
- Conduct privacy diligence for data providers, marketplace partners, and vendors at onboarding, changes, renewal, and exit; maintain the subprocessor list and customer notices.
- Manage access, deletion, correction, and opt-out requests end to end, including California Delete Act (DROP) requests, across systems holding personal data, using Transcend and retaining evidence of completion.
- Translate approved retention rules into a system-by-system map with technical owners and coordinate fixes with Engineering and Data Platform.
- Keep privacy notices, the subprocessor list, and other public commitments aligned with Clay’s actual data processing; support incident response with Legal and Security.
- Automate routine work using Clay and AI tools, create short role-specific training, and report program metrics to Legal and EPD leadership.
- Coordinate with Legal, Product, Engineering, business teams, and GRC to implement standards, gather evidence, and maintain clean handoffs.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
