Compared with the selected benchmark ("All roles in San Francisco, United States"), this listing's salary midpoint is about 76% higher. The offer sits above the benchmark range (€8,681–€13,311). The offer's range width is broadly in line with the benchmark. This benchmark is based on 2 comparable listings.

Monthly salary comparison for Governance
Market	Lower bound (25th percentile)	Median	Upper bound (75th percentile)
All roles in San Francisco, United States	€8,681/per month	€10,996/per month	€13,311/per month

About the role

IN THIS ROLE, YOU WILL - Improve and maintain the privacy program against ISO 27701, ISO 27018, HIPAA, GDPR, CCPA/CPRA and the wider set of US state laws. - Own Decagon's privacy program operations end to end: data inventory, DSAR intake and fulfillment, DPAs and cross-border transfer mechanisms, data retention schedule, subprocessor onboarding and our public subprocessor list, breach notification readiness, and company-wide privacy training. - Partner with legal team to improve existing programs on data residency, subprocessor flow-downs, retention by data class, DPIAs and transfer impact assessments, while owning and driving day-to-day decision.

Job Details

Responsibilities

Improve privacy program against multiple standards
Own privacy program operations end to end
Coordinate with legal on data residency and DPIAs

Requirements

5+ years of GRC experience in high-growth SaaS or technology companies with privacy compliance responsibilities
Proven track record in SOC 2, ISO 27001 or similar certifications
Experience in data privacy regulations including CCPA, GDPR, and AI governance frameworks
Strong project management and cross-functional coordination
Excellent written and verbal communication for diverse audiences
Technical security controls understanding and collaboration with engineering teams

Skills & Technologies

SOC 2ISO 27001HIPAAGDPRCCPA/CPRAprivacy program managementdata inventoryDSARDPIAsDPAscross-border transferssubprocessor managementsecurity documentation