Job Opportunities API

At WHOOP, we're on a mission to unlock human performance and healthspan. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. WHOOP is hiring a Privacy Technology & Data Rights Program Manager to help scale and strengthen the operational, technical, and regulatory foundation of our privacy program. In this role, you will own the day-to-day governance and administration of our privacy automation platform, including Transcend, and support data rights workflows across SaaS applications, internal systems, and proprietary platforms. You will also serve as the HIPAA Privacy Officer for applicable programs and data environments, partnering closely with Legal, GRC, IT, Product Security, Software Engineering, Data, and business system owners to operationalize privacy requirements, maintain audit-ready documentation, and support privacy-by-design across the WHOOP data lifecycle. RESPONSIBILITIES: - - Own administration and governance of the Transcend platform, including workflows, integrations, permissions, field mapping, testing, reporting, and ongoing platform health - Serve as the Privacy Officer for applicable programs and data environments, partnering with Legal and GRC to support privacy policies, procedures, documentation, training, operational controls, and audit readiness - Maintain a current inventory of systems in scope for data rights and privacy workflows, including SaaS applications, proprietary platforms, data stores, and operational systems, and define system-level coverage requirements across access, deletion, correction, portability, restriction, opt-out, retention, and sensitive data handling where applicable - Partner with Legal, privacy, GRC, IT, Product Security, Software Engineering, Data, and business stakeholders to translate data rights and privacy requirements into operational workflows, technical enablement requirements, platform configuration, and recurring validation processes - Support privacy-by-design checkpoints for new SaaS tools, data flows, product features, and material changes to customer or regulated data processing, ensuring data rights and privacy considerations are assessed before launch or production use - Monitor DSR workflow performance, including integration status, automation failures, SLA support, system coverage, exception handling, and remediation status, while coordinating cross-functional remediation for gaps, workflow issues, integration failures, and mapping inconsistencies - Develop and maintain workflow maps, control evidence, test results, exception tracking, reporting dashboards, and audit-ready documentation to support privacy, security, compliance, and audit readiness activities - Support escalated privacy inquiries and incidents requiring technical validation, system coverage, data mapping, workflow status, or platform evidence in partnership with Legal, GRC, Security, IT, Engineering, and other stakeholders - Provide regular reporting to Legal, GRC, Security, IT, Engineering, and other stakeholders on platform health, system coverage, workflow performance, regulatory related privacy operations, open risks, and remediation progress QUALIFICATIONS: - - 5+ years of experience in privacy operations, privacy technology, technical program management, GRC, security operations, data governance, or a related function - Experience working with privacy automation, workflow automation, SaaS administration, system integrations, or data governance tools - Familiarity with data rights workflows, including access, deletion, correction, portability, restriction, and opt-out support - Experience supporting privacy operations or privacy compliance programs in connection with one or more privacy-focused regulatory frameworks, such as GDPR, CCPA/CPRA, HIPAA, state privacy laws, biometric privacy laws, or similar requirements - Strong understanding of system inventories, data flows, integrations, A