Clay Labs - Privacy Program Manager

• Own the program plan. Turn Legal's privacy strategy into a prioritized plan with owners, dependencies, and six- and twelve-month outcomes. Flag early when work lacks an owner or capacity. • Own the program plan. • Own our records of processing: Maintain Clay’s records of processing for the product and our own operations, and set the privacy requirements for the data inventory our GRC team maintains: sources, uses, recipients, storage, retention, and restrictions. • Own our records of processing: • Run privacy and AI assessments. Run PIAs, DPIAs, transfer and legitimate interests assessments, and AI assessments from fact gathering through follow-up. Legal makes the legal determinations. • Run privacy and AI assessments. • Build privacy into how Clay ships. Help run privacy and AI review inside EPD’s product development process, so teams get fast, consistent answers and the right questions reach Legal early. • Build privacy into how Clay ships. • Run the operational side of AI governance. Keep records of how Clay's products and internal tools use AI. Gather evidence on how agent features are controlled, and keep review conditions and customer guidance current as models and permissions change. • Run the operational side of AI governance. • Run provider and vendor privacy diligence. Review data providers, marketplace partners, and vendors at onboarding, change, renewal, and exit. Maintain our subprocessor list and customer notices. • Run provider and vendor privacy diligence. • Operate privacy rights requests. Own access, deletion, correction, and opt-out requests end to end, including California Delete Act (DROP) requests, across the systems that hold a person's data, using our privacy platform (Transcend). Close every request with evidence. • Operate privacy rights requests. • Make retention and deletion work. Turn approved retention rules into a system-by-system map with technical owners, and coordinate fixes with Engineering and Data Platform. • Make retention and deletion work. • Keep our commitments accurate. Keep privacy notices, our subprocessor list, and other public commitments to customers and regulators aligned with how Clay actually processes data. Support incident response with Legal and Security. • Keep our commitments accurate. • Automate, train, and measure. Automate routine work with Clay and AI tools, build short role-specific training, and report program metrics to Legal and EPD leadership. • Automate, train, and measure. • How You'll Work with Others • Your team, Legal, sets privacy and AI standards and makes the legal calls. You put them into practice and flag early when something needs one. • Your team, Legal, • Product, Engineering, and business teams own what we build and why, including model choices, evaluations, and agent safety. You make review fast and predictable, gather the evidence, and follow through. • Product, Engineering, and business teams • Our GRC team owns security certifications such as SOC 2, the vendor and product review process, Clay’s data inventory, and security questionnaire. You own the privacy side of each and keep handoffs clean. • Our GRC team