Privacy Manager

Therabody® is the wellness tech leader with a mission to inspire and enable every body to feel, perform and look their best. Therabody’s product ecosystem includes category-creating innovations in wellness, performance and beauty products, proprietary software and digital content. Not only is it part of our brand ethos to help others, but we are also defining the cutting edge of wellness technology while winning accolades such as Fast Company’s Brands That Matter, Oprah's Favorite Things and the TIME Best Inventions 2025 award.

We’re committed to continuous innovation and surround ourselves with specialists, thought leaders, and experts - inside and outside of the office. If you thrive in creative environments, are concerned with big, innovative ideas, love to collaborate, have an entrepreneurial spirit, and are driven to succeed, get in touch with us. Together we can push the limits of what can be achieved for everybody.

We are seeking a Privacy Manager to serve as the critical liaison between Legal, Technology, Product, and Security teams. This role will ensure privacy requirements are translated into practical, scalable processes and technical implementations across the organization. The initial focus will be supporting our wearable technology initiatives, ensuring privacy is embedded into product development from design through deployment.

The ideal candidate combines a strong understanding of privacy regulations with experience working alongside engineering and product teams to operationalize privacy programs.

• Partner with Legal to interpret privacy laws, regulatory requirements, and company policies.
• Collaborate with Product, Engineering, IT, and Security teams to translate privacy requirements into technical and operational controls.
• Lead privacy-by-design initiatives throughout the product development lifecycle.
• Serve as the primary privacy program manager for the wearable technology project, ensuring compliance is integrated into product architecture and workflows.
• Conduct and facilitate Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
• Develop, implement, and maintain privacy policies, standards, and operational procedures.
• Coordinate cross-functional efforts to address privacy risks, remediation activities, and ongoing compliance initiatives.
• Partner with Information Security on data governance, data classification, retention, and incident response activities.
• Monitor changes in privacy laws and industry best practices, recommending updates to internal processes as needed.
• Support vendor privacy reviews and third-party risk assessments.
• Develop training and awareness programs to promote privacy compliance across the organization.

• Bachelor's degree in Information Systems, Business, Computer Science, Cybersecurity, Legal Studies, or a related field.
• 5+ years of experience in privacy, information governance, compliance, cybersecurity, product management, or a related discipline.
• Experience working across legal and technical teams to implement privacy requirements.
• Working knowledge of major privacy regulations such as GDPR, CCPA/CPRA, HIPAA (as applicable), and other emerging privacy laws.
• Strong project management and cross-functional communication skills.
• Ability to translate legal and regulatory language into actionable business and technical requirements.

• Professional certifications such as CIPP/US, CIPP/E, CIPM, CIPT, or Certified Information Privacy Manager
• Experience supporting connected devices, IoT, digital health, wearable technology, or consumer technology products
• Familiarity with software development life cycles, cloud platforms, APIs, identity management, and data governance
• Experience implementing Privacy by Design principles within Agile product development environments.
• Cross-functional leadership
• Privacy program management
• Regulatory compliance
• Technical communication
• Process improvement
• Data governance
• Change management

• Privacy requirements are incorporated into product development early in the lifecycle
• Wearable technology initiatives launch with documented privacy controls and compliance assessments.
• Privacy reviews are completed efficiently without delaying product delivery.
• Cross-functional teams have clear ownership and operational processes for privacy compliance.
• Privacy risks are proactively identified, documented, and mitigated.