Senior Program Manager - Privacy Compliance & Data Governance
Senior Program Manager who builds and scales Qualtrics' enterprise Information Governance program — running a 'Data Front Door' intake process, data catalogs/marketplace, and translating privacy rules (HIPAA, GDPR, CCPA) into technical controls across Snowflake, Databricks, and AWS/GCP. Sits between Legal, InfoSec, and engineering.
- Compensation
- $142K–$172K / yr
- Location
- United States (Remote)
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Full time
- Experience
- 8+ years
- Category
- Data engineering
- Posted
Skills
Must have
- 5+ years in Data Governance, Data Security, Data Operations, or Information Architecture within high-growth tech, SaaS, or data-intensive organizations
- Deep understanding of data privacy and security frameworks (HIPAA, GDPR, CCPA) and commercial data licensing
- Experience administering enterprise data governance & catalog tools (e.g., Collibra, Alation, DataGalaxy, Atlan)
- Technical aptitude with cloud data ecosystems (Snowflake, Databricks, AWS/GCP), SQL, and data security mechanisms (hashing, tokenization, differential privacy)
- Ability to create self-service workflows that accelerate R&D and AI/ML initiatives while ensuring compliance
Nice to have
- Certifications: CDMP, CIPP/US, CIPT, CDPSE, CISSP, or CISM
Full description
At Qualtrics, we create software the world’s best brands use to deliver exceptional frontline experiences, build high-performing teams, and design products people love. But we are more than a platform—we are the creators and stewards of the Experience Management category serving over 18K clients globally. Building a category takes grit, determination, and a disdain for convention—but most of all it requires close-knit, high-functioning teams with an unwavering dedication to serving our customers.
When you join one of our teams, you’ll be part of a nimble group that’s empowered to set aggressive goals and move fast to achieve them. Strategic risks are encouraged and complex problems are solved together, by passing the mic and iterating until the best solution comes to light. You won’t have to look to find growth opportunities—ready or not, they’ll find you. From retail to government to healthcare, we’re on a mission to bring humanity, connection, and empathy back to business. Join over 5,000 people across the globe who think that’s work worth doing.
Senior Program Manager, Privacy Compliance & Data Governance
Why We Have This Role
We’re hiring a Senior Program Manager, Privacy Compliance & Data Governance to establish, scale, and orchestrate our enterprise Information Governance program. You’ll sit at the intersection of Legal, Security, Engineering and Product, bridging the gap between business strategy, legal compliance, data security, and engineering. Rather than acting as a traditional gatekeeper, you will build and manage our "Data Front Door" to directly address how teams discover data rights, request entitlements, and manage novel data use cases safely and efficiently.
How You’ll Find Success and Grow
In this role, you won't just manage compliance—you will shape how our organization safely innovates with data in an increasingly complex global landscape.
- Lead Enterprise-Wide Change:Grow your capability as a transformational program leader. You will drive a company-wide "Privacy by Design" culture, mentoring cross-functional team members and establishing sustainable governance practices that scale with business growth.
-
Governance Framework & Tooling Strategy: Deep fluency in privacy and data governance, establishing enterprise frameworks, data catalogs, and business glossaries that scale across high-growth SaaS environments.
- Strong Communication Skills: Exceptional verbal and written communication abilities to distill complex privacy, legal, and technical concepts into clear, actionable guidance for executive stakeholders and cross-functional teams.
-
Operational Enablement: Proven capability to design centralized intake and triage processes ("Data Front Door") that convert complex legal and security requirements and restrictions into frictionless, self-service internal workflows.