Senior Program Manager - Privacy Compliance & Data Governance

Qualtrics•Provo, UT

6d•$142,000 - $172,000•Hybrid

About The Position

Qualtrics is hiring a Senior Program Manager, Privacy Compliance & Data Governance to establish, scale, and orchestrate its enterprise Information Governance program. The role works across Legal, Security, Engineering, and Product to connect business strategy, legal compliance, data security, and engineering. It will build and manage a centralized “Data Front Door” so teams can discover data rights, request entitlements, and manage new data use cases safely and efficiently. The Senior Program Manager will shape how Qualtrics innovates with data by building a Privacy by Design culture and sustainable governance practices. The role establishes enterprise governance frameworks, data catalogs, and business glossaries; creates self-service workflows; aligns legal and privacy requirements with technical access controls; and communicates complex issues and risk metrics to executive stakeholders. The position also helps keep governance current as privacy and data security laws, security architectures, and AI/ML data use cases evolve.

Requirements

At least 8 years of experience in privacy, data governance, data security, data operations, or information architecture within a high-growth technology, SaaS, or data-intensive organization.
Deep understanding of privacy and security frameworks and ability to translate contractual rights into practical guidance for different teams.
Direct experience setting up, configuring, or administering an enterprise data governance framework, including data catalog tools such as Collibra, Alation, DataGalaxy, or Atlan.
Technical aptitude with cloud data ecosystems such as Snowflake, Databricks, AWS, or GCP; SQL; and data security mechanisms such as hashing, tokenization, and anonymization.
Demonstrated ability to create business-friendly, self-service workflows that enable R&D and AI/ML initiatives while meeting legal, contractual, and security-framework requirements.
Exceptional verbal and written communication skills to explain complex privacy, legal, and technical concepts clearly to executive stakeholders and cross-functional teams.
Ability to bridge legal and privacy compliance requirements, including laws such as HIPAA, GDPR, and CCPA, with practical technical access controls.
Initiative and ability to define processes in ambiguous situations, drive cross-functional alignment, and resolve policy conflicts.

Nice To Haves

IAPP certification such as CIPP/E, CIPP/US, CIPM, or CIPT.
ISACA certification such as CISM, CRISC, or CISA.
Data governance certification such as IGP or CDMP.

Responsibilities

Design and manage a centralized intake and triage process for custom data access requests, novel data questions, and complex derivative-work inquiries.
Establish a centralized Use Case Repository and Data Marketplace documenting pre-approved data uses, restrictions, and licensing parameters across datasets.
Partner with Engineering and Security to implement automated data classification, lineage tracking, and metadata harvesting.
Collaborate with Information Security to translate legal requirements into technical access controls, including RBAC/ABAC and row- and column-level security.
Drive governance adoption by measuring adoption KPIs, request turnaround times, and governance maturity metrics.
Deliver self-service documentation and onboarding across the organization.
Establish and scale enterprise information governance frameworks, data catalogs, and business glossaries.
Promote a company-wide Privacy by Design culture and sustainable governance practices.
Align Legal, Security, Engineering, and Product teams, resolve policy conflicts, and turn legal requirements into practical technical controls and business-enabling workflows.
Present risk metrics and communicate complex privacy, legal, and technical concepts to executive stakeholders.

Benefits

30 paid days off, comprising 15 vacation days, 5 personal days, and 10 holiday closures; additional time off after one year.
Three company shutdown days during the first week of January.
Medical, dental, vision, life, and disability insurance.
401(k) with company match.
Wellness reimbursement.
Mental health benefits.
Free weekday lunches, snacks, and drinks.
Office events and regular team activities.
Hybrid work model with three in-office days per week and flexibility to work from elsewhere for the rest of the week.
A sign-on bonus and restricted stock units may be included in an employment offer.