Sr. Privacy Compliance Specialist

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Atlanta, GA, US

5 days ago Requisition

Sr. Privacy Compliance Specialist

Edible Brands® was launched in 2022 to bring together powerful, purpose‑led brands under one unified purpose: to enrich everyday life through celebration, nourishment, and wellness. Today, Edible Brands powers three bold and growing concepts across 700+ locations worldwide.

Our portfolio spans Edible Arrangements®, the iconic gifting brand; Rōti ®, a Mediterranean‑inspired fast‑casual restaurant; ™, a trusted marketplace for low‑dosage THC & CBD wellness products; and Berry Direct ®, our robust supply chain infrastructure. Together, these brands are fueled by The Edible Way —a set of employee‑driven values that keep us committed, collaborative, adaptable, results‑driven, and always ready to celebrate.

Edible Brands® is committed to maintaining the highest standards of privacy compliance and regulatory adherence as we scale our operations across our portfolio of brands and geographies. The Privacy Compliance Specialist is a hands‑on technical ownership role for our privacy and consent management platform (currently One Trust ), and the operational backbone of our Data Subject Access Request (DSAR) and consent management programs.

This role strategically bridges Legal, Information Security, Engineering, Marketing Operations, and Data Analytics to establish and maintain enterprise‑wide privacy governance, data subject request management, and regulatory compliance.

As privacy regulations expand (GDPR, CCPA, state privacy laws, and emerging frameworks), this role ensures our organization has clear ownership of Data Subject Access Requests (DSARs), deletion workflows, consent management, and cross‑system compliance. The ideal candidate is detail‑oriented, technically hands‑on, systems‑minded, and comfortable navigating ambiguity while coordinating across technical, legal, and business teams. This role reports to Legal/Compliance leadership and is essential to our post‑Shopify migration strategy.

Location:

This position will work onsite out of our Corporate Office in Sandy Springs, GA Monday – Friday.

• Serve as the primary point of contact and relationship owner for the privacy platform vendor, managing support escalations, tracking contract terms and renewal timelines, and coordinating any implementation or professional services engagements.
• Define, document, and continuously improve privacy operations, including consent governance, Data Subject Access Request (DSAR) intake, identity verification, deletion workflows, cross‑functional execution procedures, and audit‑ready documentation.
• Manage end‑to‑end DSAR and data deletion processes across all business systems, meeting statutory response deadlines and other applicable laws, ensuring timely completion, regulatory compliance, and maintenance of audit trails and proof of deletion.
• Monitor DSAR response timelines, coordinate execution with internal teams and third‑party vendors, verify request completion across systems, and elevate risks or delays as needed.
• Serve as the primary privacy operations partner to Legal, Engineering, Marketing, Information Security, Data Analytics, and external vendors by coordinating governance meetings, compliance initiatives, vendor privacy reviews, and cross‑functional projects.
• Partner with Legal to support privacy notices, data processing agreements, regulatory interpretation, and broader privacy governance initiatives.
• Stay current on GDPR, CCPA, and emerging U.S. state privacy laws; prepare compliance reports and…