Senior Privacy Operations Manager

The legal team at Turo is expanding and looking to add a practical and proactive privacy ops manager to support Turo’s growing business. This role reports to the Senior Director, Associate General Counsel, Privacy & Product, and will serve as the primary stakeholder responsible for developing and streamlining privacy operations on the privacy team. Collaboration will be a crucial attribute as this role will work closely with legal team members globally. This position can be located in our Phoenix, Arizona; San Francisco, California; or Toronto, Canada office.

Manage data subject rights (DSR) intake, response, and tracking across GDPR, PIPEDA, CCPA, and applicable data protection laws. Responsible for initial triage of privacy inbox, calendaring of response deadlines, and providing responses to data subjects where applicable in compliance with data protection laws. Conduct, coordinate, and complete Privacy Impact Assessments (PIAs) for new product features, integrations, and data processing activities. Support privacy reviews of new products, features, and market expansions and advise on how to position and structure these launches to reduce risk while growing the business profitably. Track and analyze proposed, pending, and new domestic and global privacy, data security, and consumer legislation that could impact the business and recommend necessary modifications to practices. Own, develop, and maintain record of processing activities documentation. Maintain and update the subprocessor register and manage vendor subprocessor compliance notifications. Lead data mapping and inventory documentation in partnership with data and engineering teams. Own the compliance policy library - drafting, maintaining, versioning, and publishing policies. Develop plain-language compliance guidance for engineering, marketing, product, and HR teams. Design & deliver GDPR and privacy training to internal teams. Support commercial, procurement, and security teams with vendor security review and questionnaire responses.

3+ years of experience in privacy, data protection, compliance, or related fields (internships acceptable). Foundational understanding of data protection principles and regulations (e.g., GDPR, CCPA/CPRA, PIPEDA, AU Privacy Act). Strong attention to detail and organizational skills. Basic familiarity with data flows, systems, or information governance is a plus. Ability to clearly communicate privacy requirements, internal processes, and requirements in a collaborative, cross-functional environment. You are collaborative, pragmatic, flexible, comfortable operating in gray areas, business-focused, and highly skilled at prioritization and multitasking. Bonus if you have Certified Information Privacy Professional (CIPP) or similar certification preferred, but not required. For this role, the target base salary range in Phoenix, AZ is $100,000-$125,000 annually. This role is also eligible for equity and benefits. In general, our ranges reflect the market-based target for new hire salaries based on the level and location of the role. Within the range, individual pay is determined by objective factors assessed during the application and interview process, such as job-related skills, experience, and relevant education or training. We encourage you to talk with your recruiter to learn more about the total compensation and benefits available for this role. Turo highly values having employees working in-office to foster a collaborative work environment and company culture. This is central to how we work, and this role will be subject to our current in-office hybrid schedule that requires Turists to work in the office three days per week on Mondays, Wednesdays, and Thursdays. We expect that employees will meet these required in-office days consistently as part of their role. Your recruiter can share more information about this requirement and the in-office perks Turo offers. Turo Recruiting