Senior Privacy Compliance Program Manager

Workday's Privacy & Data Protection Team

Workday's Privacy & Data Protection Team is looking for a highly motivated senior program manager to support Workday's growing cross-functional privacy programs. The ideal candidate is a confident self-starter who can take on difficult problems, devise practical solutions, build strong relationships, and prioritize and handle multiple tasks and responsibilities with agility and efficiency.

Strong candidates will have a firm understanding of global privacy laws (GDPR, ePrivacy Directive, CCPA, CASL, etc.) and will have experience advising on a variety of general privacy and data protection issues.

Essential Duties and Responsibilities

• Build relationships with numerous internal stakeholders to understand strategic needs and goals of the business
• Develop and mature privacy and data protection programs such as data subject requests, privacy impact assessments and risk management
• Identify privacy risks and implement practical mitigation strategies
• Advise on requirements for use of new technologies
• Draft clear and concise privacy statements and other public facing notices
• Support internal processes and policies related to privacy and data protection
• Draft and review internal privacy collateral and training materials to help raise privacy awareness across the organization

About You

Basic Qualifications

• Bachelor's degree or equivalent experience
• 8+ years of experience in Privacy, Data Protection, Information Security, Compliance, Audit or Risk Management

Other Qualifications

• IAPP CIPP Certification such as CIPP/E
• Solid understanding of data protection laws and regulations in the U.S. and globally, including California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), Canada's Anti-Spam Legislation (CASL) and ePrivacy Directive
• Experience with broader and emerging privacy and AI laws is also a plus
• Familiarity with technology, with a focus on cloud computing, SaaS, cloud computing, enterprise software or social network environment.
• Willing to take on new challenges and learn new technologies
• Experience fulfilling data subject access requests including scoping and redaction
• Experience developing, maturing, implementing, or maintaining processes
• Experience with cookies and other tracking technologies
• Experience with OneTrust privacy and risk modules
• Experience with TRUSTe privacy assessments and certifications
• Experience with ISO 27701 Privacy Information Management System (PIMS)
• Experience with Data Privacy Framework (DPF) self-certification process
• Critical thinker and problem solver with a solutions based approach
• Excellent judgment and sense of humor