Privacy & Vendor Contracts Manager

Duties And Responsibilities

• Identify and manage contractual, privacy, and security risks across vendor and third-party agreements, ensuring compliance with legal, data protection, and risk management requirements.
• Independently prioritize work, apply sound judgment, and propose risk mitigation strategies, escalating high-risk issues to legal, security, and business stakeholders as needed.
• Oversee the full vendor contract lifecycle, including onboarding, renewals, and amendments, while tracking compliance with SLAs, data protection obligations, and subprocessor requirements.
• Partner with privacy, security, procurement, and TPRM teams to align contracts with data handling standards, address vendor performance gaps, and monitor key contract metrics.
• Review, redline, and negotiate a broad range of vendor and partner agreements, including DPAs, BAAs, and privacy/security addenda, as well as audit and certification rights.
• Support customer-facing privacy and security agreements in coordination with commercial legal, and manage vendor contracting for international operations and cross-border data requirements.
• Drive process improvements to streamline vendor onboarding and contracting, increase adoption of standard terms, and deliver training on contract requirements and data privacy obligations.
• Contribute to the development of privacy, AI governance, and vendor management policies, including assessing AI-related risks in vendor contracts and monitoring evolving global regulations.

Required Qualifications

• 5–7 years of experience drafting, reviewing, redlining, and negotiating vendor contracts, including DPAs, BAAs, and privacy/security addenda, with strong knowledge of data privacy, security, and SaaS agreements.
• Proven ability to manage end-to-end vendor and third-party contracting processes while partnering cross-functionally with procurement, TPRM, security, and business stakeholders.
• Strong communication and collaboration skills, with a practical, solutions-oriented approach to problem solving in a fast-paced, evolving environment.
• Self-motivated and highly organized, with the ability to prioritize workload, meet deadlines, make sound decisions, and effectively engage with executive leadership.
• Experience developing contract playbooks, negotiation guidelines, and scalable processes to improve consistency, efficiency, and contract cycle times.
• Proficiency with enterprise tools and systems, including O365, Salesforce, NetSuite, Coupa, TPRM/GRC platforms, CLM tools, and AI-assisted contract review technologies.
• Solid understanding of global privacy laws and frameworks (e.g., HIPAA, GDPR, PIPEDA, U.S. state laws) and experience supporting international vendor contracting, including cross-border data transfers and AI governance considerations.

Pay

This position offers a total compensation range of $142,000.00 to $169,000.00 (inclusive of base salary and variable compensation, such as bonuses and incentives).