SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 180,000 - 230,000 / annual
Zipline is the world's largest drone delivery service, operating on four continents and completing millions of deliveries of blood, vaccines, medical supplies, food, and retail products. The company has flown over 140 million commercial autonomous miles and is redefining logistics and supply chain operations globally.
You will lead Zipline's privacy and trust operations program, serving as the bridge between legal, compliance, security, engineering, product, and commercial teams. This is a highly cross-functional role focused on translating regulatory and legal requirements into practical operating models, technical specifications, and scalable business processes.
Key responsibilities include:
- Managing Zipline's operational program for consumer rights requests (deletion, access, correction, opt-out, DSAR workflows)
- Partnering with Legal, Security, Engineering, Product, Data, Support, and Commercial teams to implement scalable privacy processes and tooling
- Maintaining data mapping processes, inventories, and documentation across marketplace, partner integrations, white-label services, operations tooling, support systems, data platforms, and third-party vendors
- Operationalizing privacy policies across different services, partners, and jurisdictions, including data use, retention, deletion, access, and contractual obligations
- Driving implementation and architecture initiatives supporting privacy and data management as products and systems evolve
- Coordinating privacy risk assessments for new products, integrations, data uses, partner launches, and material system changes
- Supporting administration and improvement of data retention, deletion schedules, legal holds, and records of processing activities
- Partnering with Security and IT on cybersecurity audits, access reviews, incident response readiness, account takeover prevention, and fraud prevention
- Supporting data protection agreements, vendor privacy requirements, and contractual data handling commitments
- Leading measurement, reporting, and dashboards for privacy and trust operations metrics and SLAs
- Maintaining documentation, playbooks, decision logs, and repeatable processes
Requirements:
- 8+ years of experience in technical program management, privacy operations, security program management, compliance operations, product operations, or related role
- Experience building or operating privacy programs, consumer rights request workflows, DSAR processes, deletion workflows, data retention programs, or data governance systems
- Strong understanding of privacy concepts: controller vs. processor roles, personal information inventories, data mapping, privacy impact assessments, data minimization, retention, and deletion
- Working familiarity with U.S. state privacy laws, CCPA/CPRA, consumer rights programs, data protection agreements, and vendor privacy obligations
- Ability to partner effectively with Legal and translate legal requirements into technical and operational execution plans
- Strong technical fluency and comfort working with engineering teams on systems architecture, data flows, APIs, data stores, event logs, access controls, and operational tooling
- Experience coordinating cross-functional programs across Product, Engineering, Legal, Security, IT, Support, Data, and business teams
- Excellent written communication skills for documentation, process maps, executive updates, and implementation plans
- Strong judgment, ownership, and ability to drive ambiguous programs from discovery through execution
- Comfort operating in fast-moving environments requiring new mechanisms, stakeholder alignment, and continuous system improvement
Nice to have:
- Experience with privacy tooling, data discovery platforms, GRC tools, DSAR management platforms, ticketing systems, identity systems, or data cataloging tools
- Experience in marketplace, logistics, robotics, aviation, healthcare, retail, fintech, or other highly regulated operational environments
- Experience supporting account takeover, fraud, trust and safety, abuse prevention, or customer identity programs
- Experience with international privacy regimes such as GDPR or multi-country privacy requirements
- Privacy, security, or compliance certifications (CIPP/US, CIPP/E, CIPM, CIPT, CISSP, CISA, or similar)
