Cruise is creating a new-to-the-world service and a world-changing category of autonomous vehicle mobility. Because the service is new, public trust is essential to our success, including trust that we use data ethically and responsibly. As a Technical Program Manager on the Legal Team, you will play a critical role in helping build trust in our data stewardship by developing and managing processes that align with privacy, security, and AI industry standards and requirements as well as internal data management policies. You will serve as a subject matter expert on privacy enhancing solutions and embedding privacy, security, and AI governance into  product development. This role requires excellent leadership, communication, technical, and project management skills to bring complementary teams together and drive successful outcomes.

WHAT YOU'LL BE DOING:

• Operationalize and manage data subject rights requests and personal data discovery processes and tooling

• Drive cross-functional initiatives to streamline privacy, data cataloging, vendor and document management tools across Cruise systems

• Develop and operationalize policies and processes related to information classification, data ownership and accountability, data access and retention, and AI governance based on industry best practices and applicable legal standards and requirements

• Manage and operationalize privacy and data impact assessment processes and associated regulatory documentation

• Provide technical guidance and support to internal Cruise teams–including Engineering, Product Management, and Data Science–to ensure privacy enhancing technologies and solutions are embedded in the product development lifecycle

• Monitor and report on the effectiveness of privacy, data, and AI governance initiatives to senior management, highlighting potential risks and recommending improvements

WHAT YOU MUST HAVE:

• Proven experience (5-8+ years) in technical program management, preferably at a fast-paced technology company

• Strong understanding of information and data governance best practices, data protection laws and security standards, and privacy and AI regulations, including SOC 2, ISO 27001, CCPA, GDPR, and the EU AI Act

• Familiarity with privacy and data management platforms (preferably Transcend) and ability to implement, use, and maintain these tools

• Familiarity with emerging technologies, such as AI and machine learning, and how to integrate requirements related to these technologies into an information/data governance program

• Strong organizational, analytical, and problem-solving skills; creativity, resilience, and flexibility

• Outstanding communication skills: verbal and written, with engineers, non-technical partners, and executives

BONUS POINTS!

• Professional certifications in project management (e.g., PMP), privacy program management (CIPM), and/or privacy or information security (e.g., CISSP, CISM, CIPP) are highly desirable

• Experience working with Jira and developing Jira projects

• Strong knowledge of anonymization techniques (e.g., data masking, pseudonymization) and encryption standards (e.g., AES, RSA)

• Proficiency in programming languages such as Python, Java, C++, or JavaScript

• Bachelor’s or advanced degree in Computer Science, Information Systems, or a related field

The salary range for this position is $105,400 - $155,000. Compensation will vary depending on location, job-related knowledge, skills, and experience. You may also be offered a bonus, long-term incentives, and benefits. These ranges are subject to change.