Privacy Operations Program Manager

In this role, you'll own the programs central to how Stripe handles privacy at scale. You'll drive end-to-end management across data subject requests, privacy impact assessments, records of processing activities, transfer impact assessments, and cookie compliance, making day-to-day decisions that keep operations regulatory-ready and auditable. You'll also identify where processes can be tightened or automated, and build the documentation and tooling that make the team's work consistent and sustainable.

You'll work as a key connector between Privacy Legal, Privacy Engineering, and cross-functional partners across the company, translating global privacy requirements into practical operations. As a primary point of contact for incoming privacy requests, you'll handle triage and routing, and build the playbooks and response libraries that allow the team to deliver high-quality, consistent privacy experiences for Stripe users and for the regulators who depend on clear, auditable records.

• Own end-to-end program management across core privacy programs such as data subject requests (DSRs), PIAs and DPIAs, records of processing activities (ROPA), transfer impact assessments (TIAs), and cookie compliance, making day-to-day operational decisions, enforcing processes to ensure regulatory readiness, and measuring compliance at scale
• Identify and implement process improvements, including leveraging AI tooling to automate routine tasks, developing structured workflows to sustain quality standards, and maintaining accurate, auditable program records including playbooks and process documentation
• Create and maintain clear, auditable privacy documentation, including privacy assessments, program playbooks, and customer response libraries, to provide scalable, consistent privacy operational support
• Work with Privacy Legal and Privacy Engineering to fulfill user requests, build and deepen expertise on global privacy and data-protection requirements, and escalate novel or complex requests with appropriate context and documentation
• Rotate through the team's weekly runner model as the primary point of contact for incoming privacy requests, routing across intake channels and managing Jira run tickets