Sembi
Build with Confidence.
Compliance Operations Lead
Location
United States
Posted
46 days ago
Salary
Not specified
Bachelor Degree3 yrs expEnglish
Job Description
• Implement and maintain compliance Policies to support all related privacy regulations and requirements such as GDPR, CCPA, and other compliance frameworks (including AI governance and cyberresiliency).
• Conduct, review, and document privacy assessments (DPIAs, DTIAs, website/ cookie compliance, risk registry), identifying privacy risks, recommending mitigation measures, and supporting stakeholders through remediation, and improving day-to-day operational tasks in support of overall privacy compliance program.
• Collaborate with business and engineering stakeholders to devise process and product privacy remediation activities across the organization (data retention/ deletion, responsible use of AI).
• Contribute to vendor risk management program to assess vendor privacy risks, and onboard subprocessors (coordinate subprocessor notifications, review vendor data privacy and security documentation).
• Coordinate with the Legal team to execute DPA’s with customers, vendors, and partners/ resellers.
• Maintain records of data processing, data flows and process narratives for all business operational areas.
• Assist with answering data privacy related inquiries from customers, vendors, and employees (DSARs, opt-out/ unsubscribe, deletion, incident response).
• Ensure internal audits and tasks pertaining to data privacy are performed and tracked in a timely manner.
• Maintain centralized tracking and reporting for compliance commitments, remediation items, and customer-facing obligations, providing regular status updates to stakeholders.
• Own the preparation, maintenance, and reuse of standard customer-facing compliance artifacts (e.g., security questionnaires, privacy summaries, audit reports) to reduce reactive work and response time.
• Oversee and coordinate external and internal compliance audits, ensuring audit plans, timelines, evidence collection, and remediation activities are aligned, tracked, and completed in partnership with the audit owner.
Job Requirements
- 3+ years of hands-on experience in privacy compliance and governance within a SaaS or technology environment.
- Working knowledge of AI-related privacy and governance considerations; IAPP certifications preferred but not required.
- Ability to work effectively with cross-functional partners across engineering, product, sales, marketing, support, legal, and human resources, driving alignment and execution toward data privacy compliance goals.
- Practical understanding of privacy-by-design principles and experience applying them to engineering and marketing workflows.
- Experience developing, implementing, and maintaining privacy controls and procedures, with knowledge of commonly used control and risk frameworks (e.g., ISO, NIST).
- Knowledge of privacy and compliance risks associated with cookies, tracking technologies, and online analytics tools.
- Experience handling data subject rights requests (DSARs), as well as requirements related to encryption and anonymization, access controls, data retention and destruction, cross-border data transfers, privacy compliance assessments, and coordination of data breach or cyber incident response.
- Strong written and verbal communication skills, with the ability to manage multiple workstreams, prioritize effectively, and solve problems in a fast-moving environment.
Benefits
- An Equal Opportunity Employer - All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
- By submitting your application, you acknowledge that Sembi, Inc. will process and retain your resume and related personal information solely for recruitment and hiring purposes. Resumes of unsuccessful candidates will be securely deleted within twelve (12) months of the hiring decision, unless a longer period is required by law or you provide explicit consent for continued retention (e.g., for consideration for future opportunities).
- In compliance with applicable privacy laws, including the EU General Data Protection Regulation (GDPR), you have the right to request access to, correction of, or deletion of your personal information at any time by contacting compliance@sembi.com.
- Sembi, Inc. does not sell candidate data and will ensure that all personal information is processed securely and in accordance with relevant data protection regulations.
Related Guides
Related Categories
Related Job Pages
More Compliance Jobs
Compliance Manager – Healthcare
Golden Pear FundingEmpowering people to navigate the legal process with confidence and providing them financial solutions that work.
Compliance47 days ago
Full TimeRemoteTeam 51-200Since 2008H1B No Sponsor
Compliance Manager overseeing healthcare compliance and quality programs at Pear Suite
Compliance47 days ago
Full TimeRemoteTeam 10,001+H1B Sponsor
Regulatory Labeling Manager developing compliance for biopharmaceutical products
Arizona + 4 moreAll locations: Arizona, Maine, Ohio, Massachusetts, Rhode Island
Compliance47 days ago
Full TimeRemoteTeam 5,001-10,000H1B Sponsor
Associate Director providing regulatory strategic advice for U.S. healthcare communications
Compliance47 days ago
Full TimeRemote
Health Resources in Action, Inc. (HRiA) is a non-profit organization working to improve and reimagine public health. We connect, consult, and collaborate to solve complex challenges of access and equity in our health and social systems. Together with our partners, clients, and co...
United States