Principal Data Privacy Specialist, Fulfillment

Responsibilities

Privacy Operations & Program Support

• Manage and oversee end-to-end handling of data subject rights requests, including access, deletion, correction, restriction, objection, opt-out, and related complaints.
• Apply privacy requirements including the GDPR, CCPA/CPRA, other relevant US state privacy laws, data broker laws, and applicable data protection requirements.
• Oversee the data privacy mailbox, including query triage and prioritization, response coordination, and record maintenance.
• Deliver privacy fulfillment initiatives from scoping through implementation, including workflow automation, process improvement, operational policy or procedure rollout, and cross-functional change management.

Team Mentorship & Coaching

• Support day-to-day coordination of the fulfillment team through workload prioritization, escalation management, quality assurance, and process consistency.
• Provide guidance, coaching, and practical support to fulfillment team members.
• Act as a delegated point of leadership when the Senior Team Lead is unavailable.

Incident Response & Regulatory Compliance

• Support handling of data incident notifications received through privacy fulfillment channels, including initial triage, coordination with relevant teams, root-cause analysis, and remediation activities.
• Analyze privacy-related fulfillment queries, assess facts and risk, prepare recommended responses, and escalate complex or higher-risk matters.
• Maintain request records, operational metrics, and documentation for reporting, audit readiness, and continuous improvement.

Cross-Functional Partnerships

• Identify recurring issues, process gaps, and trends, including emerging requirements under US privacy and data broker laws, and recommend operational improvements.
• Work with Legal, Security, Product, Customer Support, and Operations teams to coordinate fulfillment activities.

Requirements

• 3–5+ years of experience in data privacy compliance, data protection, regulatory fulfillment, risk, or a related operational environment.
• Experience managing consumer or data subject rights requests under US privacy laws, including CCPA/CPRA, state privacy laws, and data broker requirements.
• Strong working knowledge of European data protection law and practice, including GDPR and associated guidance.
• Relevant third-level qualification and a recognized data protection or privacy certification, or progress toward one.
• Strong organizational, analytical, problem-solving, communication, and prioritization skills.
• Experience providing senior-level support, informal leadership, coaching, or quality oversight within an operational team.
• Ability to assess and resolve privacy requests pragmatically, make sound operational judgments, and escalate elevated legal, regulatory, or reputational risk.
• Professionalism, discretion, and integrity when handling sensitive information.

Nice to Have

• Privacy certification such as CIPP/E, CIPM, CIPT, AIGP, or equivalent.

Work Arrangement

• Hybrid role.