Description
Job Description
Stripe is a financial infrastructure platform for businesses. Millions of companies,from the world's largest enterprises to the most ambitious startups,use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet.
The Privacy Operations team is a pivotal part of the global privacy program at Stripe. Our vision is operational excellence,a team that is proactive, streamlined, and deeply embedded in the way Stripe works.
In this role, you'll own the programs central to how Stripe handles privacy at scale. You'll drive end-to-end management across data subject requests, privacy impact assessments, records of processing activities, transfer impact assessments, and cookie compliance, making day-to-day decisions that keep operations regulatory-ready and auditable.
Responsibilities
- Own end-to-end program management across core privacy programs such as data subject requests (DSRs), PIAs and DPIAs, records of processing activities (ROPA), transfer impact assessments (TIAs), and cookie compliance, making day-to-day operational decisions, enforcing processes to ensure regulatory readiness, and measuring compliance at scale
- Identify and implement process improvements, including leveraging AI tooling to automate routine tasks, developing structured workflows to sustain quality standards, and maintaining accurate, auditable program records including playbooks and process documentation
- Create and maintain clear, auditable privacy documentation, including privacy assessments, program playbooks, and customer response libraries, to provide scalable, consistent privacy operational support
- Work with Privacy Legal and Privacy Engineering to fulfill user requests, build and deepen expertise on global privacy and data-protection requirements, and escalate novel or complex requests with appropriate context and documentation
- Rotate through the team's weekly runner model as the primary point of contact for incoming privacy requests, routing across intake channels and managing Jira run tickets
Requirements
- 5+ years of demonstrated privacy program management and a proven track record of operationalizing and scaling cross-functional organization-wide programs from the ground up
- Excellent collaboration, communication, and relationship-building skills, and the ability to convey complex ideas succinctly to all audiences
- Demonstrated experience with privacy legislation such as GDPR, CCPA, LGPD, and PIPEDA. Experience with US state legislation, HIPAA, and GLBA is a plus.
- Hands-on experience with privacy impact assessments (PIAs and DPIAs), data subject request workflows, records of processing activities (ROPA), or other core privacy program operations
- Ability to analyze complex problems to identify root causes and trends, and to document complex narratives in a simplified way that others can use
- Curious and self-motivated with a strong affinity for vision setting, strategic problem solving, and driving outcomes
- Experienced in juggling multiple projects in a fast-paced, high-growth environment, with tight timelines and shifting priorities
- A team player, willing to pitch in where needed