Sr Privacy & Consent Compliance Manager

LendingClub•San Francisco, CA

9d•$140,000 - $159,000•Hybrid

About The Position

Happen Bank is seeking a Senior Privacy & Consent Compliance Manager to lead the Bank's privacy compliance and customer communication preferences programs. This individual contributor role protects customer information, ensures customer communication choices are honored, and maintains compliance with applicable privacy and communications regulations, including the Gramm-Leach-Bliley Act (GLBA), Regulation P, CAN-SPAM, the Telephone Consumer Protection Act (TCPA), and state privacy laws. The role partners with Legal, Compliance, Marketing, Technology, Operations, and business leaders to translate regulatory requirements into practical policies, controls, and customer experiences. It also advises leadership on privacy practices, responsible data stewardship, and thoughtful adoption of emerging technologies. The position uses a hybrid work model, with in-office attendance on Tuesdays, Wednesdays, and Thursdays in San Francisco or New York. Remote placement will not be considered. The role primarily works local hours (Pacific or Eastern Time), with flexibility across time zones as needed, and requires travel to Happen Bank offices or other locations as needed. The target base salary range is $140,000–$159,000; the role may also be eligible for long-term equity awards and an annual bonus.

Requirements

At least 6 years of experience in banking or financial services, primarily within compliance, risk management, or audit.
Bachelor's degree or higher, or an equivalent combination of education and experience.
At least 3 years of direct experience in privacy compliance.
Deep understanding of GLBA, Regulation P, applicable state privacy laws, CAN-SPAM, and TCPA, with the ability to apply requirements to real-world products and processes.
Strong communication and influencing skills, including the ability to build credibility, advise senior leaders, and drive alignment across organizational boundaries.
Strong analytical and problem-solving skills, including the ability to interpret ambiguous regulatory requirements and make sound, risk-based decisions.
Ability to balance strategic priorities with detailed execution while managing competing demands in a regulated environment.
Experience collaborating across Legal, Marketing, Technology, Operations, and business teams to support effective privacy and consent compliance practices.
High standards of integrity, ethics, accountability, and attention to detail, with the ability to engage confidently with regulators, examiners, and auditors.
Hands-on experience using AI tools to accelerate work and improve output quality, and comfort sharing effective approaches with colleagues.
Sound judgment regarding accuracy, data sensitivity, regulatory requirements, and where human validation and oversight remain essential.
Ability to work primarily local Pacific or Eastern Time hours, with flexibility across time zones when necessary.
Ability to attend in person at an eligible office in San Francisco or New York on Tuesdays, Wednesdays, and Thursdays; remote placement is not considered.
Ability to travel to Happen Bank offices and/or other locations as needed.

Nice To Haves

Professional privacy certification such as CIPP/US, CIPM, CIPT, or AIGP.
Certified Regulatory Compliance Manager (CRCM).
Experience supporting regulatory examinations and compliance audits, including developing and tracking timely corrective actions.
Experience with consent and preference management platforms, marketing technology, and customer data environments.
Experience with privacy risk assessments, data inventories, and vendor privacy oversight.

Responsibilities

Lead the design, implementation, and ongoing oversight of the Bank's privacy compliance program, ensuring adherence to GLBA, Regulation P, and applicable federal and state privacy laws and regulations.
Monitor regulatory developments, including new and amended state privacy laws, agency guidance, and enforcement trends, and assess their impact on products, processes, and data practices.
Own compliance requirements for customer communications under CAN-SPAM, TCPA, and related federal and state rules, including consent, revocation, and opt-out management across email, text, phone, direct mail, and digital channels.
Establish and maintain customer communication preference standards, ensuring consent and opt-out requests are accurately captured, honored, synchronized across systems, and processed within required timeframes.
Develop and maintain privacy policies, procedures, standards, customer-facing disclosures, and privacy notices, keeping guidance accurate and current.
Provide privacy and communication compliance guidance for new products, marketing campaigns, vendor relationships, data-sharing arrangements, and technology initiatives, including privacy-by-design reviews.
Conduct annual privacy risk assessments and ongoing compliance monitoring, identifying gaps and opportunities to strengthen controls and mitigate risk.
Support regulatory examinations, internal and external audits, and regulator inquiries by preparing responses, coordinating evidence, and developing and tracking corrective action plans through closure.
Partner with Third-Party Risk Management to assess and oversee vendors that handle customer data or conduct communications on the Bank's behalf.
Oversee the intake, investigation, and resolution of privacy-related complaints, inquiries, and incidents in coordination with Legal, Information Security, and Customer Care.
Use AI thoughtfully to improve privacy and communication compliance activities, including monitoring, testing, regulatory change analysis, and complaint trend detection, while maintaining governance, validation, human oversight, and accountability.
Deliver privacy training and awareness programs and develop clear reporting, metrics, and key risk indicators for leadership.