Sr Privacy Compliance and Ops Manager

Intuitive•Sunnyvale, CA

11h•Hybrid

About The Position

We are seeking a strategic privacy compliance and operations individual contributor to help shape and scale Intuitive’s global privacy program. This role partners across all business teams to implement priorities, drive enterprise privacy initiatives, and translate privacy requirements into scalable processes, controls, and governance. The ideal candidate brings strong project leadership, risk management, and operational excellence, and is comfortable working in a fast-paced, regulated environment. This role will help implement the roadmap for privacy compliance operations, strengthen governance and assessment models, and elevate the program’s overall maturity and business impact. The Privacy Compliance & Operations reports to the Senior Director of Privacy Compliance & Operations and is a function of the global Privacy team within the Legal department, and partners with IT and product security, product managers, procurement, and all other business teams to operationalize privacy requirements through effective governance, assessments, documentation, training, and monitoring to enable compliant, trustworthy, and responsible data use across Intuitive’s business processes, products, and systems. This role will act as a privacy compliance and operations professional responsible for implementing legal and regulatory requirements into practical processes and controls, managing cross-functional initiatives, supporting audit and regulatory readiness, and reducing privacy risk through scalable compliance operations and strong stakeholder engagement.

Requirements

10+ years of experience in privacy compliance, privacy operations, data protection, or technical security governance, risk and compliance (GRC) or privacy program management.
Strong experience with privacy risk assessments, compliance oversight, gap remediation tracking, and control monitoring.
Proven success leading cross-functional projects and implementing strategic initiatives, with strong project management and leadership communication skills.
Strong understanding of global privacy requirements, including, but not limited to GDPR, CCPA/CPRA, HIPAA, etc.
Hands-on experience with core privacy compliance activities, such as: Privacy assessments, DPIAs/PIAs, and remediation tracking RoPA, data mapping, and documentation management Incident response coordination, DSAR operations, or vendor privacy reviews Metrics, reporting, policy implementation, and process improvement
Experience working with privacy and compliance frameworks, such as: HITRUST NIST Privacy Framework / NIST CSF ISO 27001 / ISO 27701 SOC 2 or equivalent
Ability to turn legal and policy requirements into scalable operational processes and controls.
Strong analytical, problem-solving, and risk management skills.
Excellent written and verbal communication skills, with the ability to influence alignment across diverse teams.
Experience working in global, cross-functional environments.
Bachelor’s degree in business, Information Systems, compliance, risk management, or related discipline
At least one privacy certification, such as CIPP/US, CIPP/E, CIPM, CIPT, or CDPSE

Nice To Haves

Experience building or scaling privacy compliance or privacy operations programs and helping define long-term strategy in a global organization.
Experience with privacy tools or workflow platforms used for assessments, intake, case management, metrics, or evidence tracking.
Experience influencing cross-functional roadmaps, operating models, or governance decisions in complex, highly regulated environments.
Experience supporting audit readiness, regulatory inquiries, or compliance testing, including preparation for senior leadership or external stakeholder engagement.
Familiarity with AI governance and emerging privacy risks.
Experience in regulated industries such as healthcare, life sciences, academic research or medical device.
Advanced degree in law, risk management, compliance, Information Systems, or related field.

Responsibilities

Partner with cross functional, global business stakeholders to operationalize privacy requirements.
Lead privacy assessments, including DPIAs/PIAs, data transfer reviews, and risk reviews for products, systems, vendors, and business initiatives.
Identify privacy risks, assess control gaps, and drive remediation with business, legal, and technical teams.
Implement cross-functional privacy initiatives from strategy and roadmap development through execution, tracking, and executive reporting.
Maintain key privacy program documentation, including RoPA, SOPs, decision logs, evidence repositories, and related records.
Partner with technical and business teams to embed privacy requirements into processes, systems, and data practices.
Help shape privacy governance, compliance monitoring, and risk management strategies aligned with applicable laws, business priorities, and internal policies.
Participate in privacy incident response activities, including intake, documentation, follow-up actions, and lessons learned.
Help improve data subject rights operations, including intake, tracking, coordination, metrics, and process improvement.
Support third-party privacy reviews, due diligence, remediation tracking, and ongoing monitoring.
Develop metrics, dashboards, and executive reporting to track program performance, emerging risks, and overall privacy program maturity.
Drive process improvements, standardization, and tooling enhancements across privacy operations.
Serve as a strategic advisor to stakeholders by providing practical, risk-based guidance and influencing privacy decisions across the business.
Develop training, communications, and playbooks to support consistent privacy practices across teams and regions.