Senior Manager, Privacy and Compliance

Job Description – Senior Manager, Privacy and Compliance Designation: Senior Manager, Privacy and Compliance Experience: 5 yrs Location: US/Remote Employment Type: Full-Time Working Days: 5 Position Summary The Senior Manager, Privacy and Compliance will own the global requirements, solution design, implementation governance, and operating model for website and application consent management. This role is responsible for translating U.S. state and EMEA country requirements into executable consent profiles, OneTrust configurations, Adobe data-collection controls, test cases, and release criteria. Working closely with Privacy Legal, Web Engineering, MarTech, Analytics, Marketing, Security, Accessibility, and regional business teams, this position bridges legal compliance and technical execution. Note: While Legal Counsel remains accountable for final legal interpretation, this role is accountable for converting approved legal positions into working technical controls and maintaining full traceability from requirements through implementation, testing, evidence, and production monitoring. Key Responsibilities • Global Requirements & Mapping: Own the global cookie consent requirements catalog for the U.S. and EMEA (including country-specific and state-specific nuances). Maintain authoritative jurisdiction-to-consent-profile mappings covering prior-consent, opt-out, limited-banner, strict fallback, sensitive-data, child, health-data, and unknown-location scenarios. • Legal Translation & UX Specifications: Translate legal guidance into atomic business requirements, user experience specifications, technical controls, acceptance criteria, and test cases. Define required content, buttons, links, category descriptions, toggle defaults, languages, and accessibility behaviour for banners and preference centres. • OneTrust Web CMP Ownership: Own the OneTrust Web CMP design, including domain groups, templates, geolocation rules, category groups, cookie classification, Autoblocking, script blocking, consent receipts, policy versions, renewal rules, and withdrawal behaviour. • Technical Controls & Signal Management: Own Global Privacy Control (GPC) and universal opt-out signal requirements, including signal precedence, manual-choice handling, downstream propagation, and evidence capture. Direct the inventory and classification of cookies, local storage, SDKs, tags, APIs, network requests, first/third-party identifiers, and server-side destinations. • Validation & Traceability: Maintain end-to-end traceability between legal sources, requirements, OneTrust configurations, Adobe controls, test evidence, defects, approvals, and releases. Lead validation for first visits, no interaction, Accept All, Reject All, granular choices, withdrawal, policy updates, GPC, geolocation failures, cross-domain journeys, single-page applications, and mobile experiences. • Fail-Closed Governance & Oversight: Define fail-closed behaviour for unknown jurisdictions, unresolved consent, configuration failures, missing OneTrust responses, and unavailable browser storage. Chair design reviews and obtain formal sign-offs from Privacy Legal, Security, Accessibility, Analytics, Marketing, and Engineering. • Backlog & Operations Management: Own the consent-management backlog, implementation roadmap, release gates, defect prioritization, and remediation tracking. Monitor regulatory, browser, OneTrust, and Adobe updates to coordinate impact assessments, configuration updates, regression testing, and policy renewals. • Documentation & Executive Reporting: Produce operating procedures, implementation standards, architecture documentation, training materials, and audit-ready evidence. Deliver executive reporting on coverage, consent defects, unclassified technologies, control exceptions, regulatory changes, and remediation progress. Required Qualifications • Experience: 8+ years of experience in privacy technology, MarTech, digital product management, web architecture, or related fields. • OneTrust Expertise: At least 4 years of direct production experience implementing and operating OneTrust Cookie Consent or Web CMP across multiple websites, brands, countries, or business units. • Technical Proficiency: Hands-on experience with OneTrust scanning, cookie classification, category groups, banners, preference centers, geolocation rules, script blocking, Autoblocking, consent records, and production publishing. • Data & Browser Architecture: Working knowledge of cookies, local Storage, session Storage, browser identifiers, pixels, SDKs, tag managers, first/third-party requests, and server-side data forwarding. • Regulatory Knowledge: Working knowledge of GDPR, ePrivacy requirements, UK PECR, Swiss privacy requirements, U.S. state privacy laws (CCPA/CPRA), GPC, targeted-advertising opt-outs, and sensitive-data overlays. • Execution & Leadership: Proven experience translating privacy/regulatory requirements into solution designs, user stories, acceptance criteria, test cases, and production evidence. Strong experience leading complex, multi-region implementations from discovery through release and operations. • Communication: Exceptional written communication, stakeholder facilitation, decision management, and executive presentation skills. Preferred Qualifications • Certifications: OneTrust Consent and Preferences, Cookie Consent, or equivalent OneTrust certification. • Global Scale: Experience supporting multinational, multi-brand, multilingual, or heavily regulated digital environments. • Accessibility & Auditing: Familiarity with accessibility requirements (WCAG) for banners, preference centres, keyboard navigation, screen readers, and mobile interfaces; experience developing privacy control evidence for audits or regulatory inquiries.