Privacy Technology & Data Rights Program Manager

United States·BostonFull Timemid

OperationsProject Manager

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

At WHOOP, we're on a mission to unlock human performance and healthspan. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives.

Technical Tools

OperationsProject Manager

At WHOOP, we're on a mission to unlock human performance and healthspan. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives.

WHOOP is hiring a Privacy Technology & Data Rights Program Manager to help scale and strengthen the operational, technical, and regulatory foundation of our privacy program. In this role, you will own the day-to-day governance and administration of our privacy automation platform, including Transcend, and support data rights workflows across SaaS applications, internal systems, and proprietary platforms. You will also serve as the HIPAA Privacy Officer for applicable programs and data environments, partnering closely with Legal, GRC, IT, Product Security, Software Engineering, Data, and business system owners to operationalize privacy requirements, maintain audit-ready documentation, and support privacy-by-design across the WHOOP data lifecycle.

Own administration and governance of the Transcend platform, including workflows, integrations, permissions, field mapping, testing, reporting, and ongoing platform health

Serve as the Privacy Officer for applicable programs and data environments, partnering with Legal and GRC to support privacy policies, procedures, documentation, training, operational controls, and audit readiness

Maintain a current inventory of systems in scope for data rights and privacy workflows, including SaaS applications, proprietary platforms, data stores, and operational systems, and define system-level coverage requirements across access, deletion, correction, portability, restriction, opt-out, retention, and sensitive data handling where applicable

Partner with Legal, privacy, GRC, IT, Product Security, Software Engineering, Data, and business stakeholders to translate data rights and privacy requirements into operational workflows, technical enablement requirements, platform configuration, and recurring validation processes

Support privacy-by-design checkpoints for new SaaS tools, data flows, product features, and material changes to customer or regulated data processing, ensuring data rights and privacy considerations are assessed before launch or production use

Monitor DSR workflow performance, including integration status, automation failures, SLA support, system coverage, exception handling, and remediation status, while coordinating cross-functional remediation for gaps, workflow issues, integration failures, and mapping inconsistencies

Develop and maintain workflow maps, control evidence, test results, exception tracking, reporting dashboards, and audit-ready documentation to support privacy, security, compliance, and audit readiness activities

Support escalated privacy inquiries and incidents requiring technical validation, system coverage, data mapping, workflow status, or platform evidence in partnership with Legal, GRC, Security, IT, Engineering, and other stakeholders

Provide regular reporting to Legal, GRC, Security, IT, Engineering, and other stakeholders on platform health, system coverage, workflow performance, regulatory related privacy operations, open risks, and remediation progress

5+ years of experience in privacy operations, privacy technology, technical program management, GRC, security operations, data governance, or a related function

Experience working with privacy automation, workflow automation, SaaS administration, system integrations, or data governance tools

Familiarity with data rights workflows, including access, deletion, correction, portability, restriction, and opt-out support

Experience supporting privacy operations or privacy compliance programs in connection with one or more privacy-focused regulatory frameworks, such as GDPR, CCPA/CPRA, HIPAA, state privacy laws, biometric privacy laws, or similar requirements

Strong understanding of system inventories, data flows, integrations, APIs, field mapping, permissions, operational controls, and audit-ready documentation

Ability to work effectively across Legal, GRC, IT, Engineering, Product Security, Data, and business stakeholders, with the ability to communicate technical, operational, and privacy concepts clearly to both technical and non-technical audiences

Strong program management skills, including roadmap ownership, dependency tracking, stakeholder management, remediation planning, issue tracking, and recurring governance routines

Strong commitment to embracing and leveraging AI tools in day-to-day tasks, ensuring AI-assisted work aligns with the same high-quality standards as personal contributions

Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.

WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility

The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.

At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.

The U.S. base salary range for this full-time position is $155,000-195,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.

In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.

These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.