Product Operations, Security & Compliance

Clay

. Build and own the end-to-end vendor onboarding compliance process, including DPA and SOC 2/GDPR data compliance reviews, subprocessor list updates, and customer notifications .

Posted 10/2/2026full-timeNew York City • New York • United StatesJuniorMid-Level💰 $130,000 - $180,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and managing end-to-end vendor onboarding compliance processes, with a strong understanding of privacy laws and frameworks such as GDPR and CCPA/CPRA. Capable of creating operational systems from scratch and effectively collaborating with cross-functional teams to ensure compliance and security.

Highest-signal resume keywords

Vendor Onboarding ComplianceGDPR ComplianceProject ManagementData Privacy LawsSaaS Operational Programs

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vendor Risk AssessmentDPA ManagementData MappingPrivacy Impact AssessmentCompliance ReviewDSAR ProcessesSecurity QuestionnairesPrivacy Incident ResponseCompliance Standards KnowledgeSaaS Infrastructure Understanding

Soft Skills

Strong Communication SkillsIndependent WorkPrioritizationAdaptabilityBuilder Mindset

Tools & Technologies

VantaTranscendCompliance Tools

Industry Keywords

Information SecuritySaaSCompliance ProgramsISO 27001SOC 2CCPACPRA

About the role

Key responsibilities & impact

Build and own the end-to-end vendor onboarding compliance process, including DPA and SOC 2/GDPR data compliance reviews, subprocessor list updates, and customer notifications
Serve as the internal owner and point of contact for external GRC vendors
Manage GRC vendor intake, ticketing, SLAs, quality review, and performance metrics
Ensure teams and systems are integrated into Clay's compliance tools and framework, including DSAR processes
Partner with Security, Legal, Marketing, Data, and other stakeholders to scale privacy-by-design practices
Build and complete compliance reviews for new data sets and vendor compliance
Create operational processes and systems from scratch to scale compliance work across the company
Own compliance programs end-to-end
Assist with security and privacy questionnaires from prospective and existing customers
Work at the intersection of engineering, security, legal, and business teams

Requirements

What you’ll need

Bachelor's degree in Information Security, Business, or a related field (or equivalent experience)
2+ years of experience building and scaling operational programs, ideally in a SaaS or tech environment
Strong builder mindset and ability to create processes and systems from scratch
Understanding of privacy laws and frameworks, including GDPR and CCPA/CPRA
Experience with vendor risk assessments, security questionnaires, and DPA/subprocessor management
Familiarity with DSAR processes and compliance tools such as Vanta or Transcend
Excellent project management skills
Strong communication skills for partnering with legal, engineering, data, and business teams
Ability to work independently, prioritize effectively, and adapt in a fast-paced, high-growth environment
Knowledge of additional compliance standards such as ISO 27001 and SOC 2 is a bonus
Experience with data mapping, privacy impact assessments, or privacy-related incident response is a bonus
Technical aptitude for understanding SaaS infrastructure and data flows
Legally authorized to work in the United States
Position based in NYC; candidates must be located in the tri-state area or planning to relocate within commuting distance

Benefits

Comp & perks

Equity
Access to world-class coaches specializing in creativity, management, and more
Optional voluntary diversity and inclusion survey
Flexible/hybrid work arrangement