• This role requires excellent leadership, communication, technical, and project management skills to bring complementary teams together and drive successful outcomes
• Proven experience (5-8+ years) in technical program management, preferably at a fast-paced technology company
• Strong understanding of information and data governance best practices, data protection laws and security standards, and privacy and AI regulations, including SOC 2, ISO 27001, CCPA, GDPR, and the EU AI Act
• Familiarity with privacy and data management platforms (preferably Transcend) and ability to implement, use, and maintain these tools
• Familiarity with emerging technologies, such as AI and machine learning, and how to integrate requirements related to these technologies into an information/data governance program
• Strong organizational, analytical, and problem-solving skills; creativity, resilience, and flexibility
• Outstanding communication skills: verbal and written, with engineers, non-technical partners, and executives

Desirable

• As a Technical Program Manager on the Legal Team, you will play a critical role in helping build trust in our data stewardship by developing and managing processes that align with privacy, security, and AI industry standards and requirements as well as internal data management policies
• You will serve as a subject matter expert on privacy enhancing solutions and embedding privacy, security, and AI governance into product development
• Operationalize and manage data subject rights requests and personal data discovery processes and tooling
• Drive cross-functional initiatives to streamline privacy, data cataloging, vendor and document management tools across Cruise systems
• Develop and operationalize policies and processes related to information classification, data ownership and accountability, data access and retention, and AI governance based on industry best practices and applicable legal standards and requirements
• Manage and operationalize privacy and data impact assessment processes and associated regulatory documentation
• Provide technical guidance and support to internal Cruise teams–including Engineering, Product Management, and Data Science–to ensure privacy enhancing technologies and solutions are embedded in the product development lifecycle
• Monitor and report on the effectiveness of privacy, data, and AI governance initiatives to senior management, highlighting potential risks and recommending improvements