PrivacyProgramManager

## In this role, you can expect to Own PlayOn's privacy program governance: CCPA, COPPA, and applicable state privacy laws as they apply. Drive compliance remediation work in partnership with Legal and external privacy counsel. Conduct Privacy Impact Assessments (PIAs) for new products, features, and vendor relationships, surfacing real risk and driving resolution, not just documenting it. Maintain Records of Processing Activities (ROPA) and the company-wide data inventory; validate accuracy across all three product platforms. Oversee privacy processes and ensure activities align with program requirements and are conducted within SLA. Participate in the Data Privacy Council (DPC) as the privacy program's subject matter expert. Maintain and update external-facing privacy policies, internal notices, and employee data handling guidelines. Conduct vendor privacy risk assessments during onboarding and annual vendor reviews. Support GRC program, including evidence collection for Compliance reports and audits, e.g. SOC 2 Type II. Own the security questionnaire response process for customer and prospect privacy inquiries. Track and report privacy program metrics, open risks, and remediation progress to the CISO. ## To thrive in this role, you have 3–5 years of privacy program experience at a consumer-facing technology company — operational track record, not just policy or legal advisory. CCPA compliance experience. Working knowledge of COPPA and the practical implications for products serving minors or educational institutions. Experience conducting PIAs and privacy risk assessments that produce actionable decisions, not just documentation. Familiarity with data mapping and ROPA methodology — you have built or maintained a data inventory before. Comfortable working in a governance and oversight model — advising and holding partner teams accountable rather than owning every operational process directly. Strong written communication: clear privacy notices, precise questionnai