Job description
Who We Are:
Therabody® is the wellness tech leader with a mission to inspire and enable everybody to feel, perform and look their best. Therabody’s product ecosystem includes category-creating innovations in wellness, performance and beauty products, proprietary software and digital content. Not only is it part of our brand ethos to help others, but we are also defining the cutting edge of wellness technology while winning accolades such as Fast Company’s Brands That Matter, Oprah's Favorite Things and the TIME Best Inventions 2025 award.
We’re committed to continuous innovation and surround ourselves with specialists, thought leaders, and experts - inside and outside of the office. If you thrive in creative environments, are concerned with big, innovative ideas, love to collaborate, have an entrepreneurial spirit, and are driven to succeed, get in touch with us. Together we can push the limits of what can be achieved for everybody.
Who We’re Looking For:
We are seeking a Privacy Manager to serve as the critical liaison between Legal, Technology, Product, and Security teams. This role will ensure privacy requirements are translated into practical, scalable processes and technical implementations across the organization. The initial focus will be supporting our wearable technology initiatives, ensuring privacy is embedded into product development from design through deployment.
The ideal candidate combines a strong understanding of privacy regulations with experience working alongside engineering and product teams to operationalize privacy programs.
Key Responsibilities
Partner with Legal to interpret privacy laws, regulatory requirements, and company policies.
Collaborate with Product, Engineering, IT, and Security teams to translate privacy requirements into technical and operational controls.
Lead privacy-by-design initiatives throughout the product development lifecycle.
Serve as the primary privacy program manager for the wearable technology project, ensuring compliance is integrated into product architecture and workflows.
Conduct and facilitate Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
Develop, implement, and maintain privacy policies, standards, and operational procedures.
Coordinate cross-functional efforts to address privacy risks, remediation activities, and ongoing compliance initiatives.
Partner with Information Security on data governance, data classification, retention, and incident response activities.
Monitor changes in privacy laws and industry best practices, recommending updates to internal processes as needed.
Support vendor privacy reviews and third-party risk assessments.
Develop training and awareness programs to promote privacy compliance across the organization.
Qualifications
Required
Bachelor's degree in Information Systems, Business, Computer Science, Cybersecurity, Legal Studies, or a related field.
5+ years of experience in privacy, information governance, compliance, cybersecurity, product management, or a related discipline.
Experience working across legal and technical teams to implement privacy requirements.
Working knowledge of major privacy regulations such as GDPR, CCPA/CPRA, HIPAA (as applicable), and other emerging privacy laws.
Strong project management and cross-functional communication skills.
Ability to translate legal and regulatory language into actionable business and technical requirements.
Preferred
Professional certifications such as CIPP/US, CIPP/E, CIPM, CIPT, or Certified Information Privacy Manager
Experience supporting connected devices, IoT, digital health, wearable technology, or consumer technology products
Familiarity with software development lifecycles, cloud platforms, APIs, identity management, and data governance
Experience implementing Privacy by Design principles within Agile product development environments.
Key Competencies
Cross-functional leadership
Privacy program management
Regulatory compliance
Risk assessment
Stakeholder management
Technical communication
Process improvement
Data governance
Change management
Success Measures
Privacy requirements are incorporated into product development early in the lifecycle
Wearable technology initiatives launch with documented privacy controls and compliance assessments.
Privacy reviews are completed efficiently without delaying product delivery.
Cross-functional teams have clear ownership and operational processes for privacy compliance.
Privacy risks are proactively identified, documented, and mitigated.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.