About the Role:

Gusto is looking for a Privacy Program Manager to help develop and mature the objectives and strategy for our Privacy Program. Gusto is a fast-growing company with an increasing number of customers who trust us with highly-sensitive, personally identifiable information (PII) and protected health information (PHI) about themselves and their employees when they sign up for or use our services. As a result, safeguarding our customers’ data privacy is a top consideration in everything we do here at Gusto. This requires Gusto to be innovative, forward thinking, and transparent about privacy and our commitment to compliance. While reporting to our Global Head of Privacy, this person will play a critical support role in creating, implementing, and driving internal adoption of the Privacy Program here at Gusto.

About the Team:

You will be joining the Legal & Compliance team at Gusto, reporting to the Global Head of Privacy and helping to fine tune and mature Gusto’s Privacy program as a whole. You will work closely with members of the Legal team, as well as various cross-departmental partners throughout the business.

Here’s what you’ll do day-to-day:

• Be a cross-functional champion for Privacy and data protection within Gusto
• Support the design, creation, and implementation of key Privacy Program initiatives that deliver best in class privacy practices
• Develop and enhance privacy policies, procedures, and documentation to ensure continued compliance with relevant regulations and standards
• Work as part of a cross-functional team to deliver best-in-class privacy and data-protection training initiatives
• Help develop and deliver regular and high-value privacy communications and messaging to various departments
• Prepare and deliver privacy training and awareness programs for employees across the organization
• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new projects and initiatives
• Identify and implement operational improvements to embed privacy and data protection in the way teams work at Gusto
• Support adoption of operational privacy processes through discussion and coordination with stakeholders across the company
• Work with legal and other teams to review and track privacy and data protection compliance through project lifecycles
• Assist in monitoring and responding to privacy-related inquiries and incidents, including data breaches and Subject Access Requests (SARs)
• Assist in conducting periodic audits and assessments of privacy controls and processes
• Support and manage various privacy related projects

Here’s what we're looking for:

• Bachelor's degree in Business, Legal Studies, Information Technology, or a related field; J.D. from an accredited law school preferred
• 4+ years of work experience in privacy or technology law, financial services, healthcare, or other related fields
• Proven track record of breaking down processes and identifying key pain points in order to deliver business improvements at local, regional and global levels
• Proven track record of collaborating with cross-functional groups to set objectives and produce results
• Experience managing, organizing, and coordinating projects and process-improvements in a program
• Thorough understanding of privacy laws, regulations, and standards, including but not limited to CCPA, HIPAA, GDPR, NIST, and other relevant data protection frameworks
• Familiarity with emerging trends and technologies in the field of data privacy and protection.
• Knowledge of information security principles and practices, including encryption, access controls, and data breach response protocols
• Understanding of risk management principles as they pertain to data privacy and protection
• Strong analytical skills with the ability to assess complex situations and formulate effective solutions
• Proficiency in project management methodologies, including planning, execution, and monitoring
• Skilled in building and maintaining collaborative relationships with stakeholders at all levels of the organization
• Strong communication skills and a proven ability to educate, inspire, and drive support for the Privacy function
• Strong problem solving skills to evaluate solutions and then empower others to deliver
• CIPM, CIPP/US, CIPP/E, or other relevant privacy certifications
• Collegiality, accountability, a sense of humor

Our cash compensation amount for this role is targeted at $112,000/yr - $138,000/yr in Denver & most major metro locations, and $136,000/yr - $168,000/yr for San Francisco & New York. Final offer amounts are determined by multiple factors including candidate location, experience and expertise and may vary from the amounts listed above.