The opportunity
Coursera and Udemy are now one company, creating one of the world's most comprehensive skills development platforms for the AI era. This strengthens our ability to accelerate AI-powered innovation and shape how the world discovers and builds skills at a pivotal moment of change.
What you'll do
Lead and continuously improve core privacy program operations, including: privacy impact assessments (DPIAs), records of processing activities (ROPAs), vendor privacy reviews, and privacy compliance workflows, using privacy management tools and workflow automation where appropriate.
Design, implement, and manage scalable processes for data subject rights: requests and general privacy inquiries, partnering with Engineering and Support teams to improve efficiency while meeting regulatory deadlines.
Partner with Product, Engineering, Security, Legal, Marketing, Procurement,: and other stakeholders to conduct privacy reviews for new products, features, vendors, and business initiatives, embedding privacy by design into business processes.
Develop and maintain privacy policies, standards, operational guidance,: training, records, and self-service resources that enable teams to manage routine privacy obligations independently, with clear escalation paths where appropriate.
Monitor changes in global privacy laws and regulations, translating legal: requirements into practical operational processes, controls, and guidance.
Define and report on privacy program metrics, identify opportunities to: improve operational efficiency, and support initiatives related to incident response, data retention, cross-border data transfers, and broader privacy governance.
What they're looking for
- + years of experience in privacy, data protection, compliance, or a related program management function.
- Demonstrated experience supporting a privacy program subject to the General: Data Protection Regulation (GDPR) and one or more U.S. state privacy laws, such as the California Consumer Privacy Act (CCPA), within a multinational or complex organization.
- Demonstrated experience translating privacy and data protection requirements,: including GDPR and CCPA, into operational processes, policies, controls, guidance, or technical requirements in partnership with Legal, Engineering, Product, and Security teams.
- Experience conducting operational privacy activities, including DPIAs,: maintaining ROPAs, managing data subject rights requests, vendor privacy reviews, privacy due diligence, and privacy contract reviews.
