Senior Data Security & Compliance Manager

At Nuna, we believe every family deserves thoughtfully designed products that combine safety, innovation, and style. As a global premium baby gear brand, our core values of Community, Generosity, Teamwork, and Excellence guide everything we do, from creating high-quality products to fostering a collaborative and supportive workplace.

We are committed to continuous growth, meaningful impact, and making a difference for families around the world.

Currently we are looking for a Senior Data Security & Compliance Manager to lead the organization's data privacy, data governance, and regulatory compliance programs across both consumer and employee data fulltime- onsite at our Washington location.

About The Role

Reporting into the Legal function, this role serves as the operational owner of data privacy processes, controls, and compliance frameworks, partnering closely with HR, IT, Security, Product, Operations, and external counsel. This individual will oversee compliance with applicable federal, state, and international privacy regulations, establish governance standards for data handling, lead privacy risk assessments, manage regulatory requests and incident response activities, and drive continuous improvement of privacy and data management practices. The ideal candidate will bring deep expertise in United States privacy regulations, including evolving state privacy laws, employee data protection requirements, and consumer data governance frameworks.

What You’ll Be Doing

Privacy & Regulatory Compliance

• Manage U.S. enterprise-wide privacy and data governance programs.
• Monitor and interpret privacy, data security, and consumer protection laws across all 50 U.S. states.
• Advise business leaders on compliance requirements related to consumer, applicant, employee, contractor, and candidate data.
• Ensure compliance with applicable regulations including:
  • CCPA/CPRA
  • Virginia Consumer Data Protection Act
  • Colorado Privacy Act
  • Connecticut Data Privacy Act
  • Utah Consumer Privacy Act
  • Emerging state-specific privacy regulations
  • State biometric privacy laws
  • State employee monitoring and employee privacy regulations
  • Federal privacy and cybersecurity requirements
• Partner with Legal, HR, & IT on developing privacy positions, policies, and risk mitigation strategies.

Data Governance & Employee Data Management

• Establish and maintain standards for collection, storage, transfer, retention, and deletion of employee and consumer data.
• Develop data classification, retention, and destruction procedures.
• Partner with HR regarding employee privacy compliance.
• Conduct periodic audits of systems, vendors, and business processes.
• Maintain records of processing activities and data inventories.

Security & Incident Management

• Coordinate privacy-related aspects of cybersecurity incidents and data breach investigations.
• Support breach notification obligations and regulatory reporting.
• Partner with IT Security to ensure appropriate controls are implemented and documented.
• Participate in incident response planning and tabletop exercises.

Vendor & Third-Party Risk

• Review vendor privacy and security controls.
• Support negotiation and administration of:
  • Data Processing Agreements (DPAs)
  • Privacy addenda
  • Data transfer agreements
• Conduct vendor privacy assessments and risk reviews.

Training & Awareness

• Develop U.S. enterprise privacy training programs.
• Deliver targeted training for:
  • HR
  • IT
  • Customer Support
  • Operations
  • Leadership teams
• Promote a culture of privacy-by-design and data stewardship.

Compliance Monitoring & Reporting

• Establish privacy metrics, dashboards, and compliance reporting.
• Conduct periodic compliance reviews and risk assessments.
• Report findings and recommendations to Legal, HR, IT, and Executive Leadership.

This position description is intended to provide a summary of the essential duties, tasks, and responsibilities of this position and shall not be considered an exhaustive listing of all work requirements.