Compliance and Risk Manager

Title: Compliance and Risk Manager
Duration: 6 Months
Location: US-Remote (Preference for candidates in West Coast time zones / Bay Area, but open to strong candidates US-wide)

Position Overview

The People Data Review Program Manager will join the People Risk, Privacy, Compliance (PRPC) team to lead key risk initiatives and scale our global program. Specifically, this role is responsible for ensuring end-to-end assessments of employment, privacy, and AI risks across new and novel use cases impacting People Data.

The ideal candidate possesses proven risk management expertise, approaches problems as a systems thinker, and has extensive experience leading complex, highly matrixed enterprise initiatives.

Key Responsibilities

• Risk Assessment & Analysis: Perform deep-dive risk assessments across privacy and employment compliance, specifically focusing on product-facing initiatives.

• End-to-End Execution: Lead end-to-end risk assessments for projects involving people data, maintaining full accountability and collaborating closely with legal partners.

• Framework Implementation: Apply and maintain rigorous risk frameworks to evaluate complex, multi-faceted compliance risks.

• Product & Technical Collaboration: Partner with engineering and technical teams to evaluate infrastructure, data processing mechanics, and technical architecture to assess associated risks.

• People Data Review Program Support: Support and drive the People Data Review program, managing high-intensity workflows with a no-fail approach to speed and precision.

• Compliance by Design: Influence product development early through "compliance by design" principles to ensure long-term adherence to global protection standards.

• Issue Resolution: Lead the remediation and resolution of risk findings identified during reviews in partnership with legal and cross-functional compliance teams.

• Stakeholder Communication: Develop and execute proactive communication plans to inform stakeholders and leadership of program status, key findings, and emerging risks.

• Escalation Management: Anticipate operational bottlenecks, manage escalations effectively, and ensure HR compliance standards are uncompromised.

• Metrics & Performance Tracking: Define, track, and report on key risk metrics, quality indicators, and performance signals while driving cross-functional deliverable execution.

Role Requirements & Qualifications

Must-Have Experience & Skills

• Deep Domain Expertise: 10+ years of professional experience in risk assessment, assurance, and compliance management.

• Risk & Compliance Background: 2nd line of defense risk management or internal audit experience (preferably within a technology company).

• Privacy & Employment Compliance: Strong expertise in data protection and privacy frameworks (e.g., GDPR, CCPA) alongside employment compliance, with specific focus on People Data and/or User Data Privacy.

• AI & Security Assessment: Proven track record conducting risk assessments covering privacy, employment, security, and AI compliance in fast-paced environments.

• Technical Literacy: Solid understanding of data infrastructure, data pipelines, and technical processing mechanisms.

• Analytical Rigor & Independence: Strong structured thinking with the ability to work independently, make educated risk decisions quickly, and hit the ground running with minimal guidance.

• Stakeholder Management: Exceptional interpersonal skills with a track record of building open, candid, and trusted relationships with engineering teams and legal counsel.