Clay Labs Privacy Program Manager at Clay Labs builds and runs the company's privacy program including AI governance operations. The role involves translating legal privacy strategy into operational processes and tooling.
Responsibilities
Own the program plan. Turn Legal's privacy strategy into a prioritized plan with owners, dependencies, and six- and twelve-month outcomes. Flag early when work lacks an owner or capacity.
Own our records of processing: Maintain Clay’s records of processing for the product and our own operations, and set the privacy requirements for the data inventory our GRC team maintains: sources, uses, recipients, storage, retention, and restrictions.
Run privacy and AI assessments. Run PIAs, DPIAs, transfer and legitimate interests assessments, and AI assessments from fact gathering through follow-up. Legal makes the legal determinations.
Build privacy into how Clay ships. Help run privacy and AI review inside EPD’s product development process, so teams get fast, consistent answers and the right questions reach Legal early.
Run the operational side of AI governance. Keep records of how Clay's products and internal tools use AI. Gather evidence on how agent features are controlled, and keep review conditions and customer guidance current as models and permissions change.
Run provider and vendor privacy diligence. Review data providers, marketplace partners, and vendors at onboarding, change, renewal, and exit. Maintain our subprocessor list and customer notices.
Operate privacy rights requests. Own access, deletion, correction, and opt-out requests end to end, including California Delete Act (DROP) requests, across the systems that hold a person's data, using our privacy platform (Transcend). Close every request with evidence.
Make retention and deletion work. Turn approved retention rules into a system-by-system map with technical owners, and coordinate fixes with Engineering and Data Platform.
Keep our commitments accurate. Keep privacy notices, our subprocessor list, and other public commitments to customers and regulators aligned with how Clay actually processes data. Support incident response with Legal and Security.
Automate, train, and measure. Automate routine work with Clay and AI tools, build short role-specific training, and report program metrics to Legal and EPD leadership.
How You'll Work with Others
Your team, Legal, sets privacy and AI standards and makes the legal calls. You put them into practice and flag early when something needs one.
Qualification
CIPP/EHands-on AI governance experienceExperience with Transcend
Preferred
CIPP/E, CIPP/US, CIPT, or AIGP
Hands-on AI governance experience, such as AI inventories, AI impact assessments, ISO/IEC 42001, or the NIST AI RMF
Experience at a B2B data or enrichment company, or with data partnerships and licensing
Experience with Transcend, OneTrust, DataGrail, or similar
