Sr Privacy & Consent Compliance Manager

LendingClub•Lehi, NY

6d•$110,000 - $155,000•Hybrid

About The Position

Happen Bank is seeking a Sr Privacy & Consent Compliance Manager to lead the Bank's privacy compliance and customer communication preferences programs. This individual contributor will help protect customer information, ensure customer communication choices are honored, and maintain compliance with applicable privacy and communication regulations, including the Gramm-Leach-Bliley Act (GLBA), Regulation P, CAN-SPAM, the Telephone Consumer Protection Act (TCPA), and state privacy laws. The role partners with Legal, Compliance, Marketing, Technology, Operations, and business leaders to turn regulatory requirements into practical policies, controls, and customer experiences. It also serves as a trusted advisor to leadership on privacy practices, responsible data stewardship, and adoption of emerging technologies. The role is based in an eligible office in San Francisco, New York, or Lehi. Happen Bank uses a hybrid work model, with in-office attendance Tuesdays, Wednesdays, and Thursdays; remote placement will not be considered. The position primarily works local hours in the Pacific, Eastern, or Mountain time zones, with flexibility across time zones as needed. Travel to Happen Bank offices and/or other locations may be required as needed. The target base salary range is $110,000–$155,000. Base salary depends on job-related knowledge, experience, education, skills, and location. The role may also be eligible for long-term equity awards and an annual bonus. Happen Bank offers a competitive benefits package and is an equal opportunity employer committed to diversity, equity, inclusion, and reasonable accommodations.

Requirements

6+ years of experience in banking or financial services, primarily within compliance, risk management, or audit.
Bachelor's degree or higher, or equivalent combination of education and experience.
3+ years of direct experience in privacy compliance.
Deep understanding of privacy regulations, including GLBA, Regulation P, applicable state privacy laws, CAN-SPAM, and TCPA, with the ability to apply requirements to real-world products and processes.
Strong communication and influencing skills, with the ability to build credibility, advise senior leaders, and drive alignment across organizational boundaries.
Strong analytical and problem-solving skills, including the ability to interpret ambiguous regulatory requirements and make sound, risk-based decisions.
Ability to balance strategic priorities with detailed execution while managing competing demands in a regulated environment.
Experience collaborating across Legal, Marketing, Technology, Operations, and business teams to support effective privacy and consent compliance practices.
High standards of integrity, ethics, accountability, and attention to detail, with the ability to engage confidently with regulators, examiners, and auditors.
Hands-on experience using AI tools to accelerate work and improve output quality, and comfort sharing effective approaches with colleagues.
Sound judgment regarding accuracy, data sensitivity, regulatory requirements, and where human validation and oversight remain essential.

Nice To Haves

Professional privacy certification such as Certified Information Privacy Professional (CIPP/US), Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), or Artificial Intelligence Governance Professional (AIGP).
Certified Regulatory Compliance Manager (CRCM).
Experience supporting regulatory examinations and compliance audits, including developing and tracking timely corrective actions.
Experience with consent and preference management platforms, marketing technology, and customer data environments.
Experience with privacy risk assessments, data inventories, and vendor privacy oversight.

Responsibilities

Lead the design, implementation, and ongoing oversight of the Bank's privacy compliance program, ensuring adherence to GLBA, Regulation P, and applicable federal and state privacy laws and regulations.
Monitor regulatory developments, including new and amended state privacy laws, agency guidance, and enforcement trends, and assess their impact on products, processes, and data practices.
Own compliance requirements for customer communications under CAN-SPAM, TCPA, and related federal and state rules, including consent, revocation, and opt-out management across email, text, phone, direct mail, and digital channels.
Establish and maintain customer communication preference standards, ensuring consent and opt-out requests are accurately captured, honored, synchronized across systems, and processed within required timeframes.
Develop and maintain privacy policies, procedures, standards, customer-facing disclosures, and privacy notices, ensuring guidance remains accurate and current.
Provide privacy and communication compliance guidance for new products, marketing campaigns, vendor relationships, data sharing arrangements, and technology initiatives, including privacy-by-design reviews.
Conduct annual privacy risk assessments and ongoing compliance monitoring, identifying gaps and opportunities to strengthen controls and mitigate risk.
Support regulatory examinations, internal and external audits, and regulator inquiries, including preparing responses, coordinating evidence, and developing and tracking corrective action plans through closure.
Partner with Third-Party Risk Management to assess and oversee vendors that handle customer data or conduct communications on Happen Bank's behalf.
Oversee the intake, investigation, and resolution of privacy-related complaints, inquiries, and incidents in coordination with Legal, Information Security, and Customer Care.
Use AI thoughtfully to improve privacy and communication compliance activities, including monitoring, testing, regulatory change analysis, and complaint trend detection, while maintaining appropriate governance, validation, human oversight, and accountability.
Deliver privacy training and awareness programs and develop clear reporting, metrics, and key risk indicators for leadership.