6+ years of experience in privacy program management or related fields, preferably in tech or AI companies.
Proven ability to operationalize privacy requirements under GDPR, CCPA/CPRA, HIPAA, and biometric privacy laws.
Technical understanding of data flow diagrams and system architectures related to data handling.
Experience in enhancing privacy review processes and control frameworks.
Hands-on management of consent management platforms and cookie compliance.
Familiarity with security frameworks like SOC 2 or ISO 27001 is beneficial.
Privacy certifications (CIPP/US, CIPP/E, CIPM, CIPT) are a plus.
Responsibilities
Manage and enhance ElevenLabs' global privacy program, ensuring compliance with legal requirements.
Coordinate privacy compliance workflows across various regulatory frameworks.
Oversee privacy impact assessments for AI systems and sensitive data.
Collaborate with cross-functional teams to integrate privacy-by-design in product development.
Maintain comprehensive privacy governance records and data inventories.
Handle data subject requests, ensuring timely and consistent responses.
Work with Security and Legal on vendor privacy assessments and risk remediation.
Support privacy incident responses and regulatory inquiries through effective documentation and coordination.
Implement privacy tooling to streamline operations and maintain consent management.
Develop metrics and dashboards to track compliance and program maturity.
Create and update privacy policies, procedures, and training initiatives.
Benefits
Remote work flexibility within the United States, with a preference for Eastern time zone.
Opportunity to work in a fast-paced, innovative AI environment.
Collaboration with diverse teams across Legal, Product, Engineering, and Security.
Engagement with cutting-edge privacy challenges involving emerging technologies.
Full Job Description
About the Role
We are seeking an experienced Privacy Program Manager to join our Legal Team and help build and scale ElevenLabs' global privacy program. In this role, you will translate privacy requirements into effective, repeatable processes across the company and drive the day-to-day operation of key privacy initiatives.
You will work closely with Legal, Product, Engineering, Security, Safety, and GTM teams to operationalize privacy-by-design, manage privacy assessments and compliance workflows, and strengthen the systems and processes that support ElevenLabs' growing global business. This role is ideal for someone who combines deep privacy program experience with strong project management skills and enjoys building scalable programs in a fast-moving AI environment.
Responsibilities
Manage and continuously improve ElevenLabs' global privacy program, translating legal and regulatory requirements into scalable operational processes and controls.
Own and coordinate privacy compliance workflows across frameworks including GDPR, CCPA/CPRA, US state privacy laws, HIPAA, and applicable biometric privacy requirements.
Manage privacy impact assessment processes, including Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), and assessments involving AI systems, biometric data, voice technologies, health information, and other sensitive data.
Partner with Product, Engineering, Legal, and Security teams to operationalize privacy-by-design throughout the product development lifecycle.
Maintain data inventories, records of processing activities (RoPAs), data flow documentation, and other privacy governance records.
Manage processes for data subject and consumer rights requests, including access, deletion, correction, and opt-out requests, and help ensure requests are handled consistently and within applicable deadlines.
Partner with Security and Legal on third-party and vendor privacy assessments, data processing requirements, and privacy-related risk remediation.
Support privacy incident response and regulatory or customer inquiries by coordinating documentation, stakeholders, timelines, and follow-up actions.
Implement and administer privacy tooling and automation to improve the efficiency and scalability of privacy operations including maintaining ElevenLabs' consent management platform and partnering with Legal, Marketing, Product, and Engineering to ensure cookie, tracking technology, and other consent and preference mechanisms are appropriately configured, documented, monitored, and updated as our products and regulatory requirements evolve.
Develop privacy program metrics, dashboards, and reporting to track compliance, identify risks, and communicate program maturity and priorities to stakeholders.
Develop and maintain privacy policies, procedures, playbooks, templates, and internal guidance.
Coordinate privacy training and awareness initiatives across the company.
Who you are
Excited by AI and emerging technologies and interested in solving novel privacy challenges involving voice, biometrics, health information, and other sensitive data.
An exceptional program manager who can turn complex requirements into clear workstreams, owners, milestones, and measurable outcomes.
Comfortable operating across Legal, Product, Engineering, Security, and commercial teams and able to communicate effectively with both technical and non-technical stakeholders.
Highly organized and detail-oriented, while able to prioritize effectively and maintain momentum across multiple workstreams.
Pragmatic and solutions-oriented, with a strong instinct for building processes that manage risk without creating unnecessary friction.
Comfortable building programs and processes from the ground up in a fast-paced, high-growth environment.
What you bring
6+ years of experience in privacy program management, privacy operations, data governance, compliance, or a related field, ideally within a technology, SaaS, or AI company.
Demonstrated experience operationalizing privacy requirements under frameworks such as GDPR, CCPA/CPRA, and other US state privacy laws as well as sector specific frameworks such as HIPAA and biometric privacy requirements.
Technical mindset, you can read a data flow diagram, understand system architectures and keys to data handling and can translate between legal requirements and engineering implementation.
Experience building or significantly improving privacy review processes, privacy impact assessments, or privacy control frameworks.
Hands-on experience managing consent management platforms and cookie/tracking technology compliance, including consent configuration, preference management, and coordination with technical and marketing teams.
Familiarity with security and privacy frameworks such as SOC 2, ISO 27001, or similar.
Privacy certifications such as CIPP/US, CIPP/E, CIPM, or CIPT are a plus.
Excellent project management, communication, stakeholder management, and problem-solving skills.
Location
This role is remote and can be executed in the United States. We have a strong preference for the Eastern time zone, ideally New York.
