Sr. Privacy Compliance Specialist

Location: This position will work onsite out of our Corporate Office in Sandy Springs, GA Monday – Friday. What this looks like day to day: Own the implementation, administration, and optimization of the privacy compliance platform (e.g., OneTrust), including consent management, preference centers, cookie categorization, regulatory settings, workflows, user permissions, integrations, testing, and deployments. Serve as the primary point of contact and relationship owner for the privacy platform vendor, managing support escalations, tracking contract terms and renewal timelines, and coordinating any implementation or professional services engagements. Define, document, and continuously improve privacy operations, including consent governance, Data Subject Access Request (DSAR) intake, identity verification, deletion workflows, cross-functional execution procedures, and audit-ready documentation. Manage end-to-end DSAR and data deletion processes across all business systems, meeting statutory response deadlines and other applicable laws, ensuring timely completion, regulatory compliance, and maintenance of audit trails and proof of deletion. Monitor DSAR response timelines, coordinate execution with internal teams and third-party vendors, verify request completion across systems, and escalate risks or delays as needed. Maintain a complete inventory of cookies, tags, third-party vendors, and data integrations across all digital properties, ensuring proper categorization and alignment with user consent preferences. Conduct ongoing cookie, tag, and tracking technology audits (including via Google Tag Manager) to identify undocumented technologies and partner with Marketing to ensure analytics and marketing tools honor consent signals. Serve as the primary privacy operations partner to Legal, Engineering, Marketing, Information Security, Data Analytics, and external vendors by coordinating governance meetings, compliance initiatives, vendor privacy reviews, and cross-functional projects. Partner with Legal to support privacy notices, data processing agreements, regulatory interpretation, and broader privacy governance initiatives. Stay current on GDPR, CCPA, and emerging U.S. state privacy laws; prepare compliance reports and audit documentation while identifying, mitigating, and escalating privacy risks and compliance gaps. Support the development of privacy policies, data governance standards, and best practices for data collection, processing, retention, and deletion across the organization. Maintain and continuously update the organization's data inventory / Records of Processing Activities (RoPA) across business systems.

What you bring: Bachelor's degree required; background in privacy, compliance, legal operations, or data governance preferred. Minimum 3–5 years of experience in privacy, compliance, legal operations, or data governance roles, including direct hands-on configuration (not just use) of consent management or privacy platforms (OneTrust, TrustArc, Termly, or similar) Hands-on experience with Shopify, e-commerce platforms, or retail-specific privacy compliance. Demonstrated knowledge of GDPR, CCPA, and state privacy laws; experience managing Data Subject Access Requests (DSARs) or data deletion requests against statutory deadlines. Experience partnering directly with vendors including support escalation, contract renewals and negotiations, and evaluation of vendor performance. Familiarity with engineering/development workflows and the ability to work with technical teams. Proficiency with Microsoft 365, data inventory/mapping tools, and analytics platforms.

Preferred: CIPP (Certified Information Privacy Professional) certification or willingness to pursue. Experience with data inventory or data governance platforms (Collibra, Traction, Alation).Background in a multi-brand, regulated, or scaled legal/compliance function. How you work: Strong project management and organizational skills, with the ability to manage multiple priorities and coordinate across teams. Excellent written and verbal communication skills, with the ability to translate technical and legal concepts for diverse audiences. Strong attention to detail, discretion, and the ability to handle confidential information. Comfortable being the in-house technical owner of a critical compliance system, proactively flagging risk rather than being asked. We are proud to be an EEO/AA employer. Applicants for employment are considered without regard to race, creed, color, religion, sex, sexual orientation, marital status, national origin, age, disability, or veteran status.