Senior Data Security

At Nuna, we believe every family deserves thoughtfully designed products that combine safety, innovation, and style. As a global premium baby gear brand, our core values of Community, Generosity, Teamwork, and Excellence guide everything we do, from creating high-quality products to fostering a collaborative and supportive workplace.
We are committed to continuous growth, meaningful impact, and making a difference for families around the world.
Currently we are looking for a Senior Data Security & Compliance Manager to lead the organization's data privacy, data governance, and regulatory compliance programs across both consumer and employee data fulltime
- onsite at our Pennsylvania location.

About The Role
Reporting into the Legal function, this role serves as the operational owner of data privacy processes, controls, and compliance frameworks, partnering closely with HR, IT, Security, Product, Operations, and external counsel. This individual will oversee compliance with applicable federal, state, and international privacy regulations, establish governance standards for data handling, lead privacy risk assessments, manage regulatory requests and incident response activities, and drive continuous improvement of privacy and data management practices. The ideal candidate will bring deep expertise in United States privacy regulations, including evolving state privacy laws, employee data protection requirements, and consumer data governance frameworks.
What You’ll Be DoingPrivacy & Regulatory ComplianceManage U.
S. enterprise-wide privacy and data governance programs.
Monitor and interpret privacy, data security, and consumer protection laws across all 50 U.
S. states.
Advise business leaders on compliance requirements related to consumer, applicant, employee, contractor, and candidate data.
Ensure compliance with applicable regulations including:CCPA/CPRAVirginia Consumer Data Protection ActColorado Privacy ActConnecticut Data Privacy ActUtah Consumer Privacy ActEmerging state-specific privacy regulationsState biometric privacy lawsState employee monitoring and employee privacy regulationsFederal privacy and cybersecurity requirementsPartner with Legal, HR, & IT on developing privacy positions, policies, and risk mitigation strategies.
Data Governance & Employee Data ManagementEstablish and maintain standards for collection, storage, transfer, retention, and deletion of employee and consumer data.
Develop data classification, retention, and destruction procedures.
Partner with HR regarding employee privacy compliance.
Conduct periodic audits of systems, vendors, and business processes.
Maintain records of processing activities and data inventories.
Security & Incident ManagementCoordinate privacy-related aspects of cybersecurity incidents and data breach investigations.
Support breach notification obligations and regulatory reporting.
Partner with IT Security to ensure appropriate controls are implemented and documented.
Participate in incident response planning and tabletop exercises.
Vendor & Third-Party RiskReview vendor privacy and security controls.
Support negotiation and administration of:Data Processing Agreements (DPAs)Privacy addendaData transfer agreementsConduct vendor privacy assessments and risk reviews.
Training & AwarenessDevelop U.
S. enterprise privacy training programs.
Deliver targeted training for:HRITCustomer SupportOperationsLeadership teamsPromote a culture of privacy-by-design and data stewardship.
Compliance Monitoring & ReportingEstablish privacy metrics, dashboards, and compliance reporting.
Conduct periodic compliance reviews and risk assessments.
Report findings and recommendations to Legal, HR, IT, and Executive Leadership.
This position description is intended to provide a summary of the essential duties, tasks, and responsibilities of this position and shall not be considered an exhaustive listing of all work requirements.
What You BringBachelor's Degree in:LawInformation SecurityCybersecurityInformation SystemsRisk ManagementBusiness AdministrationRelated field10
- 15 years of experience in privacy, data governance, compliance, or data protection.
Experience supporting both employee and consumer data privacy programs.
Experience interpreting and implementing multi-state privacy requirements.
Experience partnering with Legal, HR, and Information Security teams.
Preferred QualificationsCertified Information Privacy Professional (CIPP/US)Certified Information Privacy Manager (CIPM)Certified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)Experience within technology, healthcare, fintech, e-commerce, or SaaS environments.
Skills & CompetenciesPrivacy & Data Protection ExpertiseRegulatory InterpretationRisk ManagementPolicy DevelopmentVendor Risk OversightCross-Functional InfluenceInvestigation & Audit ManagementCommunication & Executive PresenceProgram ManagementChange ManagementStrong executive presence and ability to in