Data Privacy Manager

FICO (NYSE: FICO) is a leading global analytics software company, helping businesses in 100+ countries make better decisions. Join our world‑class team today and fulfil your career potential!

“We are seeking a Privacy Risk Management Lead to drive the review of privacy principles into FICO’s business operations. This position ensures organizational compliance with all relevant privacy laws and regulations. It involves collaborating with stakeholders across the enterprise to guarantee that personal data is collected, processed, and stored in alignment with legal requirements, company policies, and industry best practices. Ideal for a technically adept professional committed to embedding privacy into the core of modern systems.

In this role, you will act as a strategic driver of FICO’s global privacy program, converting legal and ethical requirements into scalable, privacy‑focused design patterns.” – Hiring Manager.

• Privacy Risk Manager:
  Conduct privacy impact assessments and risk assessments to identify and mitigate privacy risks. Collaborate with cross‑functional teams to ensure privacy considerations are incorporated into product design and development.
• Translate Law into Advice:
  Partner with Legal team and ope rationalise global privacy regulations (e.g., GDPR, CCPA, LGPD, etc.) into technical requirements. Develop, implement, and manage privacy standards and procedures in accordance with applicable laws and regulations.
• Conduct Technical Privacy Reviews:
  Lead or support Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new technologies, features, processes and third‑party integrations.
• Consultancy:
  Respond to privacy‑related inquiries from internal and external stakeholders, including data subjects, regulators, and other interested parties.
• Monitoring and Testing:
  Continuously assess and validate the effectiveness of the organization’s privacy program and controls, ensuring compliance with evolving laws and regulations, based on standard frameworks and best practices.
• Third Party Management:
  Work with procurement and compliance teams to ensure privacy requirements are reviewed and contracts with vendors are in compliance with privacy provisions.
• Foster a Privacy‑First Culture:
  Provide training and education on privacy best practices to employees and stakeholders.
• Stay Ahead of the Curve:
  Stay current on privacy laws and regulations, industry trends, and emerging technologies to ensure the organization remains compliant.

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Information Security, Privacy Engineering or a related technical field.
• 5+ years of experience in privacy or compliance, conducting privacy impact and risk assessments, working with project teams, stakeholders, vendors and management to ensure compliance throughout the vendor assessments.
• Demonstrated experience designing or implementing privacy‑preserving systems or features. Ability to identify privacy and security risks directly from system diagrams and data‑flow visuals, including detection of unnecessary data exposure points and segregation or minimisation gaps.
• A proven track record of aligning project outcomes with privacy regulations while mitigating risks and ensuring data protection, including the ability to lead cross‑functional teams and manage timelines.
• Strong understanding of global privacy laws and their technical implications.
• Experience designing mitigation strategies tied to PIA/DPIA findings such as architectural refactoring, data flow minimisation, isolation zones, immutability safeguards, and enforceable configuration controls.
• Excellent communication skills with the ability to explain complex privacy topics to technical and non‑technical audiences.
• Project Management skills and demonstrated ability to manage multiple projects and priorities in a fast‑paced environment.
• Certifications such as CIPP/US, CIPP/E, or Lead Implementer are a plus. If you do not currently hold one of these certifications, it is expected that you will obtain certification within the short term (3‑6 months). Additional Audit or Risk…