Sr. Privacy Program Manager

Innovate with purpose

Make your impact at a leading Fintech Company

Led by the office of the General Counsel and Chief Compliance Officer, BILL's Legal and Compliance function supports the company's growth and governance and builds trust with its customers, partners and regulators.

BILL is looking for a tech-savvy Sr. Privacy Program Manager to help scale privacy operations across the Legal and Compliance team. This person will own key parts of BILL's privacy program and work closely with Product, Engineering, Information Security, CX and Procurement.

The Sr. Privacy Program Manager reports to the Director, Legal and helps set and carry out BILL's privacy strategy. They will own privacy impact assessments, data subject requests and vendor privacy reviews. They will also look for ways to make the program more efficient, including through smart use of automation and AI tools.

• Own and scale core parts of BILL's privacy and data governance program.
• Serve as the primary point of contact for privacy escalations, data subject requests, and privacy questions from across the company.
• Own the DSAR program end to end, including intake, tracking, fulfillment, metrics and process improvements in partnership with CX.
• Lead privacy impact assessments for new products, features and vendors that process personal data.
• Run privacy reviews for AI features and internal AI tool adoption, working with Legal, InfoSec and Product.
• Build and maintain data maps and records of processing, and stay current on company systems that hold personal data.
• Develop and deliver privacy training for employees and specific teams.
• Draft and maintain privacy policies, procedures and standard operating procedures.
• Monitor changes to privacy laws and regulations (CCPA/CPRA, US state privacy laws, GDPR and emerging AI rules) and explain what they mean for the business.
• Find and roll out automation and AI tools that make privacy operations more efficient and scalable.
• Track and report privacy program metrics to Legal leadership.
• 7+ years of experience in privacy, compliance or technology program management, including at least 4 to 5 years focused on privacy program operations (DSARs, PIAs/DPIAs, TIAs, ROPAs, vendor privacy reviews, cookie consent management, etc). Experience at a software, fintech or payments company preferred.
• Working knowledge of CCPA/CPRA, US state privacy laws, GLBA, GDPR, HIPAA.
• Hands-on experience using AI tools (such as Claude, ChatGPT, Gemini, GC.ai or Harvey) in daily work, for example to draft documents, summarize regulations, review contracts, or speed up assessments and request workflows. Candidates should be ready to share specific examples.
• Familiarity with privacy risks tied to AI , such as training data use, model inputs and outputs, and vendor AI terms, and experience assessing them.
• Experience with privacy tech platforms (such as OneTrust, Transcend or TrustArc).
• Ability to work with all levels of management, multiple geographies, subject matter experts, legal staff, vendors and customers.
• Ability to pull together information from many sources and present it clearly and concisely.
• Strong written and verbal communication skills.
• Self-starter who spots issues and opportunities early and recommends actions.
• Strong prioritization, organization and follow-through in a fast-paced environment.
• Works well as part of a team.
• Bachelor's degree.
• CIPP/US, CIPP/E, CIPM or CIPT certification preferred. JD a plus, not required.

…