Mgr, Data Privacy
About the position
The Manager, Data Privacy serves as a strategic business partner responsible for leading and maturing the company's global data privacy program. As Manager, you will oversee privacy governance, compliance operations, and risk management related to personal data, artificial intelligence, and emerging technologies--ensuring privacy-by-design principles are embedded across business and technology initiatives at Grainger and subsidiaries. You will partner closely with legal, information security, technology, and business teams to operationalize privacy requirements, manage privacy risks, and support responsible innovation.
Responsibilities
• Manage a comprehensive global privacy program aligned with applicable regulations and translates legal requirements into practical policies, standards, procedures, and controls to ensure compliance and reduce regulatory risk.
• Embed privacy-by-design and privacy-by-default principles into business processes, product development, and technology initiatives while maintaining data inventories, RoPAs, risk assessments, and metrics to strengthen privacy governance.
• Serve as primary administrator and product owner for OneTrust (or equivalent), overseeing configuration, maintenance, enhancements, optimization, and workflow improvements to support scalable, efficient privacy operations.
• Lead the DSAR program, including intake, coordination, tracking, fulfillment, and escalation of complex or high‑risk requests to ensure timely, accurate, and compliant responses.
• Partner with Legal, IT, Security, HR, and business stakeholders to investigate, compile, and validate data for DSARs, regulatory inquiries, audits, and assessments to deliver complete and defensible responses.
• Support audits, regulatory inquiries, and internal reviews by producing operational evidence, reports, and documentation to demonstrate program maturity and accountability.
• Lead privacy and data protection oversight for AI, including generative AI and emerging technologies to identify and mitigate data, legal, and ethical risks.
• Partner with Information Security and Legal to support privacy aspects of cybersecurity and incident response programs to ensure incidents are addressed in alignment with privacy obligations.
Requirements
• Bachelor's Degree in information management, data governance, compliance, or a related field required
• 5+ years in data privacy, data protection, risk management, compliance, information security, or a related discipline within a complex, global organization required
• Working knowledge of global privacy regulations and frameworks, and experience operationalizing compliance programs.
• Demonstrated ability to partner cross-functionally and influence without authority.
• Technical aptitude and comfort working with technology, data flows, and security concepts.
Benefits
• With benefits starting on day one, our programs provide choice and flexibility to meet team members' individual needs, including:
• Medical, dental, vision, and life insurance plans with coverage starting on day one of employment and 6 free sessions each year with a licensed therapist to support your emotional wellbeing.
• 18 paid time off (PTO) days annually for full-time employees (accrual prorated based on employment start date) and 6 company holidays per year.
• 6% company contribution to a 401(k) Retirement Savings Plan each pay period, no employee contribution required.
• Employee discounts, tuition reimbursement, student loan refinancing and free access to financial counseling, education, and tools.
• Maternity support programs, nursing benefits, and up to 14 weeks paid leave for birth parents and up to 4 weeks paid leave for non-birth parents.
Apply tot his job
Apply To this Job
The Manager, Data Privacy serves as a strategic business partner responsible for leading and maturing the company's global data privacy program. As Manager, you will oversee privacy governance, compliance operations, and risk management related to personal data, artificial intelligence, and emerging technologies--ensuring privacy-by-design principles are embedded across business and technology initiatives at Grainger and subsidiaries. You will partner closely with legal, information security, technology, and business teams to operationalize privacy requirements, manage privacy risks, and support responsible innovation.
Responsibilities
• Manage a comprehensive global privacy program aligned with applicable regulations and translates legal requirements into practical policies, standards, procedures, and controls to ensure compliance and reduce regulatory risk.
• Embed privacy-by-design and privacy-by-default principles into business processes, product development, and technology initiatives while maintaining data inventories, RoPAs, risk assessments, and metrics to strengthen privacy governance.
• Serve as primary administrator and product owner for OneTrust (or equivalent), overseeing configuration, maintenance, enhancements, optimization, and workflow improvements to support scalable, efficient privacy operations.
• Lead the DSAR program, including intake, coordination, tracking, fulfillment, and escalation of complex or high‑risk requests to ensure timely, accurate, and compliant responses.
• Partner with Legal, IT, Security, HR, and business stakeholders to investigate, compile, and validate data for DSARs, regulatory inquiries, audits, and assessments to deliver complete and defensible responses.
• Support audits, regulatory inquiries, and internal reviews by producing operational evidence, reports, and documentation to demonstrate program maturity and accountability.
• Lead privacy and data protection oversight for AI, including generative AI and emerging technologies to identify and mitigate data, legal, and ethical risks.
• Partner with Information Security and Legal to support privacy aspects of cybersecurity and incident response programs to ensure incidents are addressed in alignment with privacy obligations.
Requirements
• Bachelor's Degree in information management, data governance, compliance, or a related field required
• 5+ years in data privacy, data protection, risk management, compliance, information security, or a related discipline within a complex, global organization required
• Working knowledge of global privacy regulations and frameworks, and experience operationalizing compliance programs.
• Demonstrated ability to partner cross-functionally and influence without authority.
• Technical aptitude and comfort working with technology, data flows, and security concepts.
Benefits
• With benefits starting on day one, our programs provide choice and flexibility to meet team members' individual needs, including:
• Medical, dental, vision, and life insurance plans with coverage starting on day one of employment and 6 free sessions each year with a licensed therapist to support your emotional wellbeing.
• 18 paid time off (PTO) days annually for full-time employees (accrual prorated based on employment start date) and 6 company holidays per year.
• 6% company contribution to a 401(k) Retirement Savings Plan each pay period, no employee contribution required.
• Employee discounts, tuition reimbursement, student loan refinancing and free access to financial counseling, education, and tools.
• Maternity support programs, nursing benefits, and up to 14 weeks paid leave for birth parents and up to 4 weeks paid leave for non-birth parents.
Apply tot his job
Apply To this Job