Sr. Privacy Compliance Analyst

Groq•San Francisco, CA

39d•$154,900 - $208,700

About The Position

Groq is seeking a Sr. Privacy Compliance Analyst to own day-to-day privacy operations and manage privacy controls within the company’s compliance program. The role is accountable for operational readiness, while legal determinations remain the responsibility of Legal. The position must be based in the Dallas, San Francisco, or New York City area. It offers remote work while Groq establishes a local office, with the expectation that the role will transition to onsite once that office opens. The analyst will maintain privacy controls and rights-request operations, track legal, regulatory, and contractual privacy obligations, assess emerging regulations, and report privacy posture and regulatory developments to security leadership. The role works in partnership with Legal and other business functions. The stated total cash salary range is $154,900–$208,700 for candidates located in the United States, inclusive of potential bonus value. Individual placement depends on geographic location, experience, skills, and internal compensation standards. International compensation varies with local market dynamics. Groq also offers a Long-Term Incentive (LTI) Program and employee benefits.

Requirements

At least 5 years of experience in privacy compliance or privacy risk management, including hands-on operationalization of privacy regulations across business functions.
Experience conducting regulatory impact assessments for emerging privacy and AI or automated decision-making laws, covering applicability, business impact, implementation requirements, and operational readiness.
Experience building and applying a risk-based compliance monitoring methodology.
Experience overseeing PIAs and DPIAs for quality, data classification, and supporting evidence.
Experience maturing privacy governance through metrics and reporting, including KRIs, KCIs, and KPIs, and presenting privacy risk posture to leadership.
Experience supporting privacy incident investigations and control testing.
Comfort partnering with Legal and understanding which questions belong to Legal.

Nice To Haves

Experience with GRC tooling is preferred.
CIPM, CIPP/E, or equivalent IAPP certification.

Responsibilities

Own closure and ongoing maintenance of privacy controls in a GRC system and privacy rights requests in DataGrail or a similar tool.
Maintain a library of legal, regulatory, and contractual privacy obligations mapped to controls and owners, including incoming regulations and a written operational position for each requirement; legal determinations remain with Legal.
Operate the privacy rights request process—including access, deletion, correction, and objection requests—within statutory deadlines, from intake and identity verification through fulfilment and record keeping.
Report privacy posture and the regulatory horizon to security leadership monthly.