Privacy Manager

About Sezzle

Sezzle is transforming the shopping experience by offering innovative, interest-free installment plans that empower consumers financially. As a leading fintech company, we combine advanced technology with seamless payment options, enhancing how customers discover, engage with, and purchase products. Our mission is to drive merchant growth through increased conversions and higher order values, while redefining the future of retail and fintech.

Role Overview

We are looking for a highly skilled Privacy Manager to lead the development and operation of our enterprise-wide privacy program based on the NIST Privacy Framework. This role offers the chance to grow within a fast-moving and expanding company, backed by executive support and a clear implementation roadmap. You will be responsible for converting the foundational privacy program materials into a fully operational program and managing its evolution.

Key Responsibilities

• Establish the privacy program by leading Sezzle’s adoption of the NIST Privacy Framework, performing gap analyses, defining action plans, and continuously monitoring to ensure compliance with US and Canadian privacy laws, including CCPA/CPRA, GLBA, TCPA, PIPEDA, and Quebec Law 25.
• Manage privacy reviews through conducting risk assessments and Privacy Impact Assessments (PIAs) for new products, features, and third-party vendors, ensuring prompt and clear decisions on approvals or redesigns.
• Create and maintain an enterprise-wide data inventory and data map, collaborating closely with engineering, and oversee the automation of consumer rights such as data access, deletion, and opt-outs.
• Implement privacy-enhancing methods by administering data de-identification and aggregation standards, ensuring data products launch with appropriate protections.
• Incorporate privacy by design principles by working alongside Product, Engineering, and Marketing teams early in development stages to embed privacy requirements effectively.
• Lead privacy governance by organizing cross-functional working groups, maintaining decision logs and obligations registers, tracking privacy metrics, and supporting executive and board reporting. Collaborate with Information Security on privacy incidents and data transfer risks.

Required Qualifications

• Minimum of 4 years managing data privacy initiatives, including experience building privacy program elements such as data inventories, consumer rights operations, or privacy review processes from inception to maturity, preferably in fintech, e-commerce, or SaaS sectors within US and Canada markets.
• Practical experience implementing privacy or security frameworks, ideally the NIST Privacy Framework, with competencies in maturity assessments and actionable compliance plans.
• Strong knowledge of leading North American privacy regulations and ability to transform complex legal requirements into practical business procedures.
• A proactive approach to privacy that supports rapid development of data-driven products, skilled in privacy-enhancing techniques like de-identification and aggregation.
• High emotional intelligence with the ability to influence diverse stakeholders, facilitate cross-functional collaboration, and communicate effectively with executives.
• Self-motivated, capable of handling multiple critical projects in a fast-paced setting with agility and sound judgment.

Preferred Credentials

• Certifications including CIPM, CIPP/US, CIPP/C, and CIPT.
• Familiarity with current privacy technology platforms such as OneTrust, Securiti.ai, or WireWheel, and experience with data analytics infrastructures.
• Experience with financial regulatory compliance like GLBA and PCI-DSS along with standard consumer privacy laws.
• Background in public companies with experience in audit committee or board-level reporting.

Personal Attributes

• Exceptionally high standards, consistently striving to improve quality and prevent recurring issues.
• Innovative thinker who challenges norms to devise new solutions.
• Action-oriented decision maker who values speed and calculated risk-taking.
• Trustworthy communicator who listens and interacts respectfully with others.
• Strong-willed and determined, able to engage in constructive dissent and fully commit once decisions are final.
• Results-driven, focused on key objectives, and resilient in overcoming obstacles.

Benefits and Work Environment

• Unlimited paid time off, volunteer hours, and sabbaticals.
• Comprehensive life, short-term disability/long-term disability, medical, dental, and vision insurance plans.
• Discounted gym memberships with LifeTime Fitness.
• 401(k) plan with company match.
• A collaborative and enjoyable workplace with motivated colleagues.
• Opportunity to be part of one of the fastest-growing fintech companies.

Compensation

The total compensation package for this role ranges from $125,000 to $190,000 annually, including base salary and variable components. Offers will be determined by factors such as qualifications, experience, and market data, with potential for exceptional candidates to receive amounts beyond this range.

Additional Information

CCPA Disclosure: Sezzle complies with the California Consumer Privacy Act, informing candidates about personal data collection and rights accordingly.

Equal Opportunity Employer: Sezzle promotes diversity and inclusion, and does not discriminate on legally protected grounds such as race, gender, age, disability, or other statuses.