Technical Program Manager, Marketplace

Zipline•South San Francisco, CA

1d•$180,000 - $230,000

About The Position

Zipline is looking for a Technical Program Manager to lead privacy and trust programs across product, engineering, legal, security, operations, and commercial teams. This person will drive the systems, processes, and cross-functional execution needed to support privacy compliance, consumer rights requests, user deletion and correction workflows, account takeover response, fraud prevention, data retention, data mapping, and protection of personal information. This is a highly cross-functional role for someone who can translate legal and compliance requirements into practical operating models, technical requirements, product changes, and durable business processes.

Requirements

8+ years of experience in technical program management, privacy operations, security program management, compliance operations, product operations, or a related role.
Experience building or operating privacy programs, consumer rights request workflows, DSAR processes, deletion workflows, data retention programs, or data governance systems.
Strong understanding of privacy concepts such as controller vs. processor roles, personal information inventories, data mapping, privacy impact assessments, data minimization, retention, and deletion.
Working familiarity with U.S. state privacy laws, CCPA/CPRA, consumer rights programs, data protection agreements, and vendor privacy obligations.
Ability to partner effectively with Legal and translate legal requirements into technical and operational execution plans.
Strong technical fluency and comfort working with engineering teams on systems architecture, data flows, APIs, data stores, event logs, access controls, and operational tooling.
Experience coordinating cross-functional programs across Product, Engineering, Legal, Security, IT, Support, Data, and business teams.
Excellent written communication skills, with the ability to create clear documentation, process maps, executive updates, and implementation plans.
Strong judgment, ownership, and ability to drive ambiguous programs from discovery through execution.
Comfort operating in a fast-moving environment where the right answer may require building new mechanisms, aligning stakeholders, and improving systems over time.

Nice To Haves

Experience with privacy tooling, data discovery platforms, GRC tools, DSAR management platforms, ticketing systems, identity systems, or data cataloging tools.
Experience with marketplace, logistics, robotics, aviation, healthcare, retail, financial technology, or other highly regulated operational environments.
Experience supporting account takeover, fraud, trust and safety, abuse prevention, or customer identity programs.
Experience with international privacy regimes such as GDPR or privacy requirements in multi-country operations.
Privacy, security, or compliance certifications such as CIPP/US, CIPP/E, CIPM, CIPT, CISSP, CISA, or similar.

Responsibilities

Manage Zipline’s operational program for consumer rights requests, including deletion, access, correction, opt-out, and other DSAR workflows.
Partner with Legal, Security, Engineering, Product, Data, Customer Support, and Commercial teams to coordinate privacy requirements and implement scalable privacy processes and tooling.
Maintain excellence across all of our data mapping processes and help keep inventories, flows, and related documentation current across Zipline’s marketplace, partner integrations, white-label services, operations tooling, support systems, data platforms, and third-party vendors.
Own operationalization of Zipline’s policies across different services, partners, and jurisdictions, including implications for data use, retention, deletion, access, and contractual obligations.
Drive implementation and architecture initiatives that support excellence in privacy and data management as products, services, and systems evolve.
Support our existing privacy and legal teams in key initiatives.
Coordinate privacy risk assessments for new products, integrations, data uses, partner launches, and material system changes.
Support ongoing administration and improvement of policies and operational mechanisms for data retention, deletion schedules, legal holds, and records of processing activities.
Partner with Security and IT on cybersecurity audits, access reviews, incident response readiness, account takeover prevention, fraud signals, and protection of personal information.
Support initiatives around data protection agreements, vendor privacy requirements, partner obligations, and contractual data handling commitments.
Lead measurement and reporting around program metrics, SLAs, dashboards, escalation paths, and reporting mechanisms for privacy and trust operations.
Maintain and refine clear documentation, playbooks, decision logs, and repeatable processes that help teams move quickly while meeting privacy, legal, and security expectations.