Mozilla - Senior Privacy & Compliance Program Manager
Requirements
• 8+ years of relevant professional experience, preferably within a software, SaaS, technology, or technical product environment. • 5+ years of direct or closely related hands-on experience in privacy operations, compliance program management, GRC, legal operations, security compliance, vendor governance, data governance, or a similar function. • Experience coordinating cross-functional programs across legal, engineering, product, support, finance, and operations teams, including work with external counsel, advisors, auditors, consultants, or vendors to move complex work forward. • Experience supporting vendor, tool, or subprocessor reviews, including privacy, security, legal, and operational risk considerations. • Experience supporting privacy operations, data governance, or user-rights workflows for products or services with international users, including areas such as GDPR or EU privacy requirements, DSARs, deletion or export requests, data inventories, records of processing, retention, access controls, or privacy policy maintenance. • Technical fluency and the ability to work with technical teams to understand how data moves through systems, including cloud services, vendor tools, support systems, logs, telemetry, authentication, access permissions, and data storage. • Familiarity with incident response, breach readiness, or security/privacy escalation processes. • Strong project and program management skills, excellent written communication, sound judgment, and the ability to build pragmatic, right-sized processes for a small but growing organization. • Ability to learn, evaluate, and responsibly use emerging technologies, including AI-enabled tools, to improve work processes. • Ability to operate with initiative in areas where processes are still evolving, including identifying stakeholders, proposing next steps, clarifying ownership, and knowing when to escalate. • Experience supporting ISO 27001 readiness, SOC 2 readiness, audits, certifications, or similar compliance efforts. • Experience working in an open-source, consumer software, communications, email, privacy-focused, or mission-driven technology organization. • Experience developing training or enablement materials for privacy, security, compliance, vendor review, or data handling. • Experience with GRC platforms, policy management tools, ticketing systems, vendor management tools, or other systems used to track compliance workflows. • What success looks like • Success in this role means privacy and compliance work is clear, coordinated, and easier for teams to execute. You will help create practical processes, documentation, ownership, and escalation paths for vendor reviews, DSAR workflows, data governance, and compliance readiness. • Over time, your work will strengthen user trust, reduce operational risk, and help MZLA scale its products and services without adding unnecessary bureaucracy. • Work environment • Work environment • You’ll work with our passionate staff, external partners, and open-source community members from around the world to support the mission and objectives of Thunderbird. • This is a remote, full-time position that requires strong communication, documentation, and follow-through. Because this role works across legal, technical, operational, and leadership contexts, you should be comfortable collaborating across time zones and disciplines through video meetings, shared documents, issue trackers, and asynchronous communication.
Responsibilities
• Coordinate MZLA’s privacy and compliance program work, including program planning, recurring reviews, risk tracking, documentation, and leadership reporting. • Translate privacy, security, and compliance requirements into practical processes that fit MZLA’s products, infrastructure, support workflows, vendor ecosystem, and operating model. • Coordinate vendor and tool reviews, working with legal, engineering, product, support, finance, operations and other stakeholders to identify and document data flows, subprocessors, privacy, security, contractual, and operational considerations. • Support privacy operations and data governance for a global user base, including DSAR and privacy-rights workflows, records of processing, retention practices, privacy policy maintenance, international privacy considerations, and related documentation. • Help develop and maintain practical data inventories and data maps that document what data MZLA collects, where it is stored, how it is used, which vendors or systems are involved, and applicable retention practices. • Partner with technical teams to support privacy-by-design practices and help ensure that new products, services, tools, and data-processing activities are reviewed early and appropriately. • Support compliance and audit-readiness efforts, including ISO-related readiness, policy adoption, evidence tracking, control implementation, access reviews, training, and remediation follow-up. • Help establish recurring review practices for vendors, tools, systems, policies, and data-processing activities to ensure documentation remains current as products and operations evolve. • Help strengthen incident response readiness by clarifying roles, escalation paths, documentation expectations, and coordination across Legal, Infrastructure, leadership, and other relevant teams. • Build lightweight guidance, checklists, templates, and training materials that help teams meet privacy and compliance expectations without creating unnecessary bureaucracy.
Benefits
• Thunderbird is one of the world’s most trusted open-source email applications, empowering more than 20 million people globally. At MZLA, the team behind Thunderbird, we build privacy-respecting communication and productivity tools that help people manage their digital lives while staying in control of their data. • We are open source by design. Our products are developed transparently and in collaboration with a global community of contributors, and that same spirit shapes how we work: collaboratively, inclusively, and with a shared commitment to putting users first. • We are a small but growing company of 60+ people distributed across seven countries. As Thunderbird evolves beyond a single desktop application, we are expanding across desktop, mobile, paid services, and new product experiences that help people and organizations work more effectively without giving up control to big tech ecosystems. • Our revenue model combines user donations, which help keep Thunderbird’s apps freely available, with paid services that cover the costs of hosted offerings while supporting long-term sustainability and continued innovation. • A note about MZLA and Mozilla: MZLA Technologies Corporation is the nonprofit-owned company behind Thunderbird and part of the Mozilla family. MZLA is separate from Mozilla Corporation and has its own compensation programs, benefits, and employment policies. • We benchmark our base salaries to local markets and target the 60th percentile of the peer market. The salary ranges for this role are: • Canada: $100,000 - $125,000 • We may consider candidates with a range of relevant experience. Final title, level, and compensation will be determined based on qualifications, experience, and role scope. • In addition to competitive salaries, we offer a comprehensive benefits package designed to support your whole self. • Work & career • Fully remote work & schedule flexibility • Company-provided laptop • Annual bonus program • Monthly remote work stipend • Annual professional development stipend • Access to Coursera learning platform • Industry conferences • Company all-hands and team gatherings • Rest & play • 24 days PTO per year (prorated) • Year-end company shutdown • 9 wellbeing days • Public holidays • Other paid leave • Quarterly wellbeing stipend for personal / family activities • Health & family • Health & family • RRSP contributions • Health, dental, & vision insurance • Disability insurance • Employee assistance program • Paid parental leave • Work eligibility • Work eligibility • Applicants must reside in and have permanent work authorization for the country location(s) specified in the posting. We are unable to consider applicants outside of these markets at this time. And, we do not provide visa sponsorship. • have permanent work authorization
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT