# Senior Privacy & Compliance Program Manager Remote from[USA](https://jobicy.com/job-region/usa.md)Salary, yearly, USD 115,000 - 145,000Department [Legal & Compliance](https://jobicy.com/categories/legal.md) Employment type Full Time, Job posted24 Jul 2026Apply before24 Aug 2026Experience level Senior Views / Applies 78 / 7 [About company](https://jobicy.com/company/mozilla.md) * Share About [Mozilla](https://jobicy.com/company/mozilla.md) Feel good about your work again. [Computer Software](https://jobicy.com/company-category/software.md) * 2005 Verified job posting This job post has been [manually reviewed](https://jobicy.com/tools/help-center/employee/how-does-jobicy-verify-the-legitimacy-of-remote-job-listings.md) for authenticity and compliance. ### AI Summary MZLA, the team behind Thunderbird, seeks a Senior Privacy & Compliance Program Manager to build and strengthen privacy, compliance, data governance, and vendor review practices. The role involves coordinating cross-functional privacy and compliance work, translating requirements into practical processes, and supporting a global user base. The ideal candidate is a hands-on program manager who can create structure without overcomplicating, operating across legal, engineering, and leadership contexts. Regular overlap with Eastern Time is required. This is a remote position with a salary range of $115,000-$145,000. ### Role DNA Job Complexity Easy Hard Pace & Pressure Relaxed Fast-paced Autonomy Level Guided Full Ownership Communication Load Independent Highly Collaborative AI Insight This is a senior role requiring deep expertise in privacy and compliance, coordination across multiple teams, and the ability to translate complex requirements into practical processes, making it moderately hard to very hard. ### Salary Analysis Median Highly Competitive USD130,000US Market USD100k – 160k 0 USD176k AI Insight The offered salary of $115,000-$145,000 is competitive for a Senior Privacy & Compliance Program Manager role in the US, falling within the typical market range. The median of $130,000 is attractive given the company's mission-driven nature and remote flexibility. ### Core Skills Required [Privacy Program Management](https://jobicy.com/jobs?search_keywords=Privacy+Program+Management.md) [Compliance](https://jobicy.com/jobs?search_keywords=Compliance.md) [Data Governance](https://jobicy.com/jobs?search_keywords=Data+Governance.md) [Vendor Review](https://jobicy.com/jobs?search_keywords=Vendor+Review.md) [GDPR](https://jobicy.com/jobs?search_keywords=GDPR.md) [Cross-functional Collaboration](https://jobicy.com/jobs?search_keywords=Crossfunctional+Collaboration.md) [Risk Management](https://jobicy.com/jobs?search_keywords=Risk+Management.md) [Open Source](https://jobicy.com/jobs?search_keywords=Open+Source.md) [DSAR](https://jobicy.com/jobs?search_keywords=DSAR.md) [Process Improvement](https://jobicy.com/jobs?search_keywords=Process+Improvement.md) ### Cover Letter Sample I am writing to express my strong interest in the Senior Privacy & Compliance Program Manager position at MZLA. With a background in privacy program management and a passion for open-source values, I am excited about the opportunity to help Thunderbird maintain user trust as it expands its products and services. I have extensive experience coordinating cross-functional privacy and compliance initiatives, including data governance, vendor reviews, and DSAR workflows. I excel at translating legal and security requirements into practical processes that fit organizational culture and scale. My ability to operate across legal, engineering, and leadership contexts, combined with strong judgment and follow-through, makes me well-suited to support MZLA's growing privacy operations. I am particularly drawn to the mission of empowering users with privacy-respecting tools. I look forward to the possibility of contributing to your team and ensuring that privacy and compliance remain central to Thunderbird's innovation. Copy ### Sample Interview Questions Can you describe a time when you had to translate complex privacy regulations into practical processes for a non-legal audience?At my previous company, I led the implementation of GDPR requirements by creating plain-language guides and workflow diagrams for engineering and product teams. I focused on actionable steps, like data mapping and consent management, and held training sessions to ensure understanding.How do you prioritize and manage multiple privacy and compliance projects simultaneously?I use a risk-based prioritization framework, evaluating each project's impact, urgency, and regulatory requirements. I maintain a centralized tracker with clear owners and deadlines, and I hold regular check-ins to identify blockers and adjust priorities as needed.Describe your experience with vendor privacy reviews. What key factors do you evaluate?I have conducted vendor reviews for over 50 tools. Key factors include data handling practices, subprocessing agreements, security certifications, contractual clauses (like SCCs), and alignment with our privacy policies. I collaborate with legal and security teams to ensure comprehensive assessment.How would you approach building a data governance framework for a small, growing organization like MZLA?I would start with a data inventory and mapping exercise to understand what data is collected and used. Then, I'd define clear data lifecycle policies (retention, deletion), assign data owners, and implement practical processes for DSARs and breach response. The key is to keep it scalable and not overly burdensome.How do you stay updated on changing privacy regulations, and how do you ensure the organization remains compliant?I subscribe to regulatory updates, attend webinars, and participate in privacy professional networks. I regularly review our policies and processes against new requirements, and I conduct periodic training and audits to ensure ongoing compliance. I also collaborate with legal counsel for complex issues. Why Thunderbird? Thunderbird is one of the world’s most trusted open-source email applications, empowering more than 20 million people globally. At MZLA, the team behind Thunderbird, we build privacy-respecting communication and productivity tools that help people manage their digital lives while staying in control of their data. We are open source by design. Our products are developed transparently and in collaboration with a global community of contributors, and that same spirit shapes how we work: collaboratively, inclusively, and with a shared commitment to putting users first. We are a small but growing company of 60+ people distributed across seven countries. As Thunderbird evolves beyond a single desktop application, we are expanding across desktop, mobile, paid services, and new product experiences that help people and organizations work more effectively without giving up control to big tech ecosystems. Our revenue model combines user donations, which help keep Thunderbird’s apps freely available, with paid services that cover the costs of hosted offerings while supporting long-term sustainability and continued innovation. A note about MZLA and Mozilla: MZLA Technologies Corporation is the nonprofit-owned company behind Thunderbird and part of the Mozilla family. MZLA is separate from Mozilla Corporation and has its own compensation programs, benefits, and employment policies. To learn more, visit [www.thunderbird.net](http://www.thunderbird.net) The opportunity Thunderbird is growing beyond our free desktop and mobile applications, and we’re looking for a Senior Privacy & Compliance Program Manager to help build and strengthen the privacy, compliance, data governance, and vendor review practices that support MZLA’s products and operations. Privacy and compliance are central to how we build and maintain user trust, particularly for a global user base with a significant presence in Europe. As MZLA expands its products and services, this role will help ensure that data is collected, used, shared, retained, and governed responsibly, in line with Thunderbird’s values and user trust commitments. You will help translate privacy, security, and compliance requirements into practical processes that fit our products and services, infrastructure, support workflows, vendor ecosystem, and operating model. MZLA is a small, growing organization, and the right person will be a hands-on program manager who can create structure without overcomplicating the work. You will work across legal, engineering, product, support, finance, operations, and other Mozilla-wide partners to clarify ownership, track open items, identify when issues need escalation, and keep cross-functional privacy and compliance work moving. This role requires strong judgment, excellent follow-through, and the ability to operate across legal, technical, operational, and leadership contexts. You will help ensure privacy and compliance work is well coordinated, appropriately documented, and grounded in practical processes that support user trust and responsible product development. This role requires regular overlap with Eastern Time working hours for meetings, collaboration, and time-sensitive coordination. We welcome candidates in other time zones who can consistently maintain meaningful overlap with ET. What you’ll do * Coordinate MZLA’s privacy and compliance program work, including planning, recurring reviews, risk tracking, documentation, and leadership reporting. * Translate privacy, security, and compliance requirements into practical processes that fit how MZLA works. * Coordinate vendor and tool reviews with legal, engineering, product, support, finance, operations, and other stakeholders. * Help document data flows, subprocessors, and privacy, security, contractual, and operational considerations. * Support privacy operations and data governance for a global user base, including DSAR and privacy-rights workflows. * Help develop and maintain practical data inventories, records of processing, retention practices, and privacy-related documentation. * Partner with technical teams to support privacy-by-design practices for new products, services, tools, and data-processing activities. * Support compliance and audit-readiness efforts, including ISO-related readiness, evidence tracking, access reviews, and remediation follow-up. * Help strengthen incident response readiness by clarifying roles, escalation paths, documentation expectations, and coordination needs. * Build lightweight guidance, checklists, templates, and training materials that help teams meet privacy and compliance expectations without creating unnecessary bureaucracy. What you bring * 8+ years of relevant professional experience, preferably within a software, SaaS, technology, or technical product environment. * 5+ years of direct or closely related hands-on experience in privacy operations, compliance program management, GRC, legal operations, security compliance, vendor governance, data governance, or a similar function. * Experience coordinating cross-functional programs across legal, engineering, product, support, finance, and operations teams, including work with external counsel, advisors, auditors, consultants, or vendors to move complex work forward. * Experience supporting vendor, tool, or subprocessor reviews, including privacy, security, legal, and operational risk considerations. * Experience supporting privacy operations, data governance, or user-rights workflows for products or services with international users, including areas such as GDPR or EU privacy requirements, DSARs, deletion or export requests, data inventories, records of processing, retention, access controls, or privacy policy maintenance. * Technical fluency and the ability to work with technical teams to understand how data moves through systems, including cloud services, vendor tools, support systems, logs, telemetry, authentication, access permissions, and data storage. * Familiarity with incident response, breach readiness, or security/privacy escalation processes. * Strong project and program management skills, excellent written communication, sound judgment, and the ability to build pragmatic, right-sized processes for a small but growing organization. * Ability to learn, evaluate, and responsibly use emerging technologies, including AI-enabled tools, to improve work processes. * Ability to operate with initiative in areas where processes are still evolving, including identifying stakeholders, proposing next steps, clarifying ownership, and knowing when to escalate. Bonus points for * Experience supporting ISO 27001 readiness, SOC 2 readiness, audits, certifications, or similar compliance efforts. * Experience working in an open-source, consumer software, communications, email, privacy-focused, or mission-driven technology organization. * Experience developing training or enablement materials for privacy, security, compliance, vendor review, or data handling. * Experience with GRC platforms, policy management tools, ticketing systems, vendor management tools, or other systems used to track compliance workflows. * Privacy certification such as CIPP/E, CIPP/US, CIPM, or similar. What success looks like Success in this role means privacy and compliance work is clear, coordinated, and easier for teams to execute. You will help create practical processes, documentation, ownership, and escalation paths for vendor reviews, DSAR workflows, data governance, and compliance readiness. Over time, your work will strengthen user trust, reduce operational risk, and help MZLA scale its products and services without adding unnecessary bureaucracy. Work environment You’ll work with our passionate staff, external partners, and open-source community members from around the world to support the mission and objectives of Thunderbird. This is a remote, full-time position that requires strong communication, documentation, and follow-through. Because this role works across legal, technical, operational, and leadership contexts, you should be comfortable collaborating across time zones and disciplines through video meetings, shared documents, issue trackers, and asynchronous communication. Compensation & benefits We benchmark our base salaries to local markets and target the 60th percentile of the peer market. The salary ranges for this role are: * US: $115,000 – $145,000 We may consider candidates with a range of relevant experience. Final title, level, and compensation will be determined based on qualifications, experience, and role scope. In addition to competitive salaries, we offer a comprehensive benefits package designed to support your whole self. Work & career * Fully remote work & schedule flexibility * Company-provided laptop * Annual bonus program * Monthly remote work stipend * Annual professional development stipend * Access to Coursera learning platform * Industry conferences * Company all-hands and team gatherings Rest & play * 24 days PTO per year (prorated) * Your birthday * Year-end company shutdown * 9 wellbeing days * Public holidays * Other paid leave * Quarterly wellbeing stipend for personal / family activities Health & family * 401(k) contributions * Health, dental, & vision insurance * Disability insurance * Life insurance * Employee assistance program * Paid parental leave * Paid sick days Work eligibility Applicants must reside in and have permanent work authorization for the country location(s) specified in the posting. We are unable to consider applicants outside of these markets at this time. And, we do not provide visa sponsorship. How to apply Please apply directly through our [career page](https://www.mozilla.org/en-US/careers/listings/?team=MZLA/Thunderbird). We carefully review every cover letter and screening question, so take the time to answer each fully. We value authentic, thoughtful responses that reflect your own experience and perspective. It is fine to use AI tools to polish your writing, but your answers should be your own. Candidates who submit generic or unoriginal AI-generated responses may be disqualified from further consideration. Our commitment to diversity, equity, and inclusion MZLA believes in the value of diverse creative practices and forms of knowledge, and knows diversity, equity and inclusion are crucial to and enrich the company’s core mission. We encourage applications from everyone, including members of all equity-seeking communities, such as (but not limited to) women, racialized and Indigenous persons, persons with disabilities, persons of all sexual orientations, gender identities and expressions. We are an equal opportunity employer. We do not discriminate on the basis of race (including hairstyle and texture), religion (including religious grooming and dress practices), gender, gender identity, gender expression, color, national origin, pregnancy, ancestry, domestic partner status, disability, sexual orientation, age, genetic predisposition, medical condition, marital status, citizenship status, military or veteran status, or any other basis covered by applicable laws. MZLA will not tolerate discrimination or harassment based on any of these characteristics or any other unlawful behavior, conduct, or purpose. We will ensure that qualified individuals with disabilities are provided reasonable accommodations to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment, as appropriate. Please contact us at hiringaccommodations@thunderbird.net to request accommodation. #LI-DNI Show more [Apply now >](https://jobicy.com/jobs/149695-senior-privacy-compliance-program-manager.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## How to apply ## See a few more Similar Legal & Compliance remote jobs * ![Welo Global logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/83c40f94-221.webp) Welo Global ### [Brazilian Subject Matter Expert in Law and Ethics (PhD level)](https://jobicy.com/jobs/147405-brazilian-subject-matter-expert-in-law-and-ethics-phd-level.md) As a trusted global transformation partner, Welocalize accelerates the global business journey by enabling brands and companies to reach, engage, and grow international audiences. Welocalize delivers multilingual content transformation services… 🌐 Anywhere•Full TimeNEW* ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius ### [Privacy Manager](https://jobicy.com/jobs/147073-privacy-manager.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… ![Europe flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/eu.svg) ![Netherlands flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/nl.svg) EU, NL•Full TimeJul 19* ![Axiom logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/1c48ca0c-221.jpeg) Axiom ### [APAC Data Privacy Lawyer – Australia (Part-time, Remote)](https://jobicy.com/jobs/147119-apac-data-privacy-lawyer-australia-part-time-remote.md) Axiom, the premier global provider of on-demand legal talent, is seeking accomplished privacy lawyers to provide contractual support for mid-sized and large Australian or multinational companies. The ideal candidates will… ![APAC flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/apac.svg) ![Australia flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/au.svg) APAC, AU•Part TimeJul 19* ![Monzo Bank logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/61b727da-221.png) Monzo Bank ### [Senior Financial Crime Investigator – Business Banking](https://jobicy.com/jobs/145882-senior-financial-crime-investigator-business-banking.md) UK Remote | 💰 £31,100 – £39,350 + Incentive Awards tied to your performance +Benefits | Hear from the team ✨Start Date: We have start dates for Tuesday 1st September,… ![UK flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/gb.svg) GB•Full TimeGBP 31,100-39,350/year* ![Axiom logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/1c48ca0c-221.jpeg) Axiom ### [Legal Consultant – Data Privacy](https://jobicy.com/jobs/146015-legal-consultant-data-privacy.md) We are currently seeking a Legal Consultant – Data Privacy to join our ranks and support our F500 clientsResponsibilities Data privacy professionals OR Qualified lawyer with minimum 2 PQE with… ![APAC flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/apac.svg) ![Hong Kong flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/hk.svg) APAC, HK•Full TimeJul 18* ![Axiom logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/1c48ca0c-221.jpeg) Axiom ### [ISDA Negotiator](https://jobicy.com/jobs/146016-isda-negotiator.md) We are currently seeking an ISDA Negotiator to join our bench and support global clients in the banking and financial services sector: Requirements: Minimum of 2 years’ experience working with… ![APAC flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/apac.svg) ![Hong Kong flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/hk.svg) APAC, HK•Full TimeJul 18* ![NetDocuments logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/d08d5ca3-221.png) NetDocuments ### [Legal Innovation Partner](https://jobicy.com/jobs/146555-legal-innovation-partner.md) NetDocuments is committed to providing an excellent candidate experience and will never ask you to engage in recruitment activity without phone, video, and in person meetings and communications from emails… ![USA flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/us.svg) US•Full TimeUSD 190k-210k/year* ![Axiom logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/1c48ca0c-221.jpeg) Axiom ### [Legal Consultant – Financial Services](https://jobicy.com/jobs/146017-legal-consultant-financial-services.md) Currently, we’re hiring Financial Services Legal Consultants to join us with: Minimum of 1 years’ experience within the general banking / regulatory compliance / banking finance areas. In-house legal experience is preferred… ![APAC flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/apac.svg) ![Hong Kong flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/hk.svg) APAC, HK•Full TimeJul 17* ![Zartis logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/9bd0869f-221.webp) Zartis ### [Head of Risk and Compilance](https://jobicy.com/jobs/146754-head-of-risk-and-compilance.md) The company and our mission: Zartis is a global AI transformation and technology consulting partner where talented engineers and technologists work on cutting edge innovation. We partner with ambitious organizations… ![Europe flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/eu.svg) EU•Full TimeJul 17* ![Remote logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/63a88d3a-221-1.png) Remote ### [Product Manager, Fraud and Compliance](https://jobicy.com/jobs/146500-product-manager-fraud-and-compliance.md) About Remote Remote is solving modern organizations’ biggest challenge – navigating global employment compliantly with ease. We make it possible for businesses of all sizes to recruit, pay, and manage… ![EMEA flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/emea.svg) EMEA•Full TimeUSD 149,750-168,500/year [More Jobs](https://jobicy.com/jobs.md)