Senior Privacy Compliance Program Manager

About the role

The Privacy & Data Protection team within CIT manages Workday's global privacy compliance program and supports Workmates across the organization to ensure Workday is handling personal data in ways that are consistent with privacy requirements and our core values.

Responsibilities

• Build relationships with numerous internal stakeholders to understand strategic needs and goals of the business
• Develop and mature privacy and data protection programs such as data subject requests, privacy impact assessments and risk management
• Identify privacy risks and implement practical mitigation strategies
• Advise on requirements for use of new technologies
• Draft clear and concise privacy statements and other public facing notices
• Support internal processes and policies related to privacy and data protection
• Draft and review internal privacy collateral and training materials to help raise privacy awareness across the organization

Requirements

• Bachelor's degree or equivalent experience
• 8+ years of experience in Privacy, Data Protection, Information Security, Compliance, Audit or Risk Management
• IAPP CIPP Certification such as CIPP/ES
• Solid understanding of data protection laws and regulations in the U.S. and globally, including California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), Canada’s Anti-Spam Legislation (CASL) and ePrivacy Directive
• Experience with broader and emerging privacy and AI laws is also a plus
• Familiarity with technology, with a focus on cloud computing, SaaS, cloud computing, enterprise software or social network environment
• Willing to take on new challenges and learn new technologies
• Experience fulfilling data subject access requests including scoping and redaction
• Experience developing, maturing, implementing, or maintaining processes
• Experience with cookies and other tracking technologies
• Experience with OneTrust privacy and risk modules
• Experience with TRUSTe privacy assessments and certifications
• Experience with ISO 27701 Privacy Information Management System (PIMS)
• Experience with Data Privacy Framework (DPF) self-certification process
• Critical thinker and problem solver with a solutions based approach
• Excellent judgment and sense of humor

Qualifications

• Basic Qualifications

• Bachelor's degree or equivalent experience
• 8+ years of experience in Privacy, Data Protection, Information Security, Compliance, Audit or Risk Management
• IAPP CIPP Certification such as CIPP/ES
• Solid understanding of data protection laws and regulations in the U.S. and globally, including California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), Canada’s Anti-Spam Legislation (CASL) and ePrivacy Directive
• Experience with broader and emerging privacy and AI laws is also a plus
• Familiarity with technology, with a focus on cloud computing, SaaS, cloud computing, enterprise software or social network environment
• Willing to take on new challenges and learn new technologies
• Experience fulfilling data subject access requests including scoping and redaction
• Experience developing, maturing, implementing, or maintaining processes
• Experience with cookies and other tracking technologies
• Experience with OneTrust privacy and risk modules
• Experience with TRUSTe privacy assessments and certifications
• Experience with ISO 27701 Privacy Information Management System (PIMS)
• Experience with Data Privacy Framework (DPF) self-certification process
• Critical thinker and problem solver with a solutions based approach
• Excellent judgment and sense of humor

Skills

• Strong understanding of global privacy laws (GDPR, ePrivacy Directive, CCPA, CASL, etc.)
• Experience advising on a variety of general privacy and data protection issues
• Ability to identify privacy risks and implement practical mitigation strategies
• Strong writing and communication skills to draft clear and concise privacy statements and other public facing notices
• Ability to support internal processes and policies related to privacy and data protection
• Ability to draft and review internal privacy collateral and training materials to help raise privacy awareness across the organization

Benefits

Workday offers a comprehensive benefits package, which includes:

• Annual refresh stock grants
• Flexible work arrangements
• Comprehensive health and wellness programs
• Professional development opportunities
• Employee referral program

Pay

The annualized base salary ranges for the primary location and any additional locations are listed below.

• Primary Location: USA.CA.Pleasanton: $139,500 USD - $209,300 USD
• Additional US Location(s): $117,800 USD - $209,300 USD

For more information regarding Workday’s comprehensive benefits, please click here.

Schedule

Our approach to flexible work combines the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role).