About this role
The team at Nanit builds connected parenting products and advanced baby monitors that use computer vision and machine learning to help parents understand sleep patterns. This Privacy and Security Program Manager will lead and evolve the compliance program by building policies, controls, and processes that protect customer data and address regulatory needs. Reporting to the Chief Legal and Administrative Officer, the person in this role will partner with Legal, Product, Engineering, and business units to embed best practices into operations.
Day-to-day work involves conducting risk assessments, managing vendor risk, supporting incident response, and implementing privacy-by-design principles into new product features. The ideal candidate brings strong organizational skills, practical experience with security frameworks, and the ability to translate complex regulations into actionable business guidance.
What you will do
- Develop and implement privacy and security policies to ensure compliance with laws such as CCPA/CPRA, GDPR, and COPPA, along with frameworks like SOC 2 and ISO 27001.
- Conduct regular risk assessments, audits, and gap analyses across systems, vendors, and business processes to drive remediation.
- Manage the third-party and vendor risk management program through due diligence, contract review support, and ongoing monitoring.
- Partner with Product and Engineering teams to embed privacy-by-design and security-by-design principles into new features.
- Monitor emerging regulatory developments and advise leadership and business stakeholders on required actions.
- Lead responses to security and privacy inquiries from customers, partners, and regulators while supporting incident response efforts.
- Design and deliver company-wide training programs and metrics reporting for senior management.
What you need
- Bachelor's degree in a related field.
- Five or more years of experience in privacy program management, information security, or a related compliance function.
- Hands-on experience supporting or operating privacy and security programs aligned to frameworks like SOC 2, ISO 27001, or NIST CSF.
- Working knowledge of consumer privacy laws including CCPA/CPRA, GDPR, and COPPA.
- Practical experience with security incident response, vendor risk management, and identity or access management concepts.
- Strong communication skills to explain complex privacy and security concepts to both technical and non-technical audiences.
Nice to have
- Relevant certifications such as CIPP, CIPM, CISSP, CIPT, or CISM
Benefits
- Hybrid in office schedule or remote work
- Remote work from home month in August
- Flexible PTO
- Equity options
- Paid parental leave
- Employee discounts on Nanit products
Skills and tech stack
Questions candidates ask
What is the remote work and hybrid policy?
This role can be offered as either hybrid or fully remote, with a preference for East Coast candidates. Employees also get a remote work from home month in August.
What is the salary range for this position?
The targeted salary range is $130,000 to $150,000, plus equity, benefits, and unlimited PTO. Final pay is determined by location, experience, and other job-related factors.
What benefits are included in the total compensation package?
The package includes access to healthcare benefits, a 401(k) plan, short-term and long-term disability coverage, and basic life insurance. Additional perks include flexible PTO, equity options, paid parental leave, and employee discounts.