Privacy Compliance Manager
FanDuel Group is looking to add a Privacy Manager to support and enhance our global privacy program. This role will be responsible for maintaining and maturing FanDuel’s privacy compliance framework, ensuring adherence to evolving legal, regulatory, and internal requirements across multiple jurisdictions. The Privacy Manager will report into the Corporate Compliance Senior Manager within FanDuel Group’s Legal and Compliance function. This role will drive execution of key privacy initiatives, including Privacy Impact Assessments, privacy rights request, third-party risk management, and own relationships with privacy management platforms. The position will partner closely with Legal, Technology, Procurement, Flutter Group and other business stakeholders to embed privacy-by-design across new and existing products. The ideal candidate for this role brings strong experience in privacy program development, operational execution, and stakeholder management. Success in this role requires excellent analytical, communication, and problem-solving skills, along with a high level of attention to detail, ownership, and the ability to thrive in a fast-paced, highly regulated environment. In addition to the specific responsibilities outlined above, employees may be required to perform other such duties as assigned by the Company. This ensures operational flexibility and allows the Company to meet evolving business needs.
- Maintain and enhance the privacy compliance framework, including policies, procedures, and taxonomy to align with regulatory and internal requirements.
- Coordinate activities across the three lines of defense, including internal audit, compliance testing, external reviews, and preparation of privacy reporting.
- Own and mature Privacy Impact Assessment (PIA) processes, including deeper integration with business change management protocols.
- Develop and manage reporting for privacy KRIs, control metrics, and risk and compliance dashboards.
- Oversee and optimize FanDuel’s privacy management platform, including data discovery, classification, third-party inventories, and automation of privacy rights requests.
- Establish and maintain a structured privacy horizon-scanning process to track regulatory developments and emerging risks.
- Develop and deliver privacy training and awareness initiatives across the organization.
- Conduct and oversee PIAs for new products and initiatives, providing risk-based recommendations and mitigation strategies.
- Manage and enhance end-to-end processes for privacy rights requests (e.g., access and erasure), ensuring compliance with statutory requirements and quality standards.
- Advise on privacy due diligence for third-party vendors, including review of vendor RFP responses and vendor risk assessments.
- Serve as a subject matter expert and escalation point for complex privacy matters.
- Build and maintain strong cross-functional relationships and collaborate with stakeholders at all levels of the organization.
- Advise on key organizational efforts such as cookie consent management, data retention strategies, and new product launches across the US and Canada.
- Partner with global colleagues to support standards development, knowledge sharing, and consistent privacy practices.
- Own the reporting obligations required by Canadian government bodies in the development of regulated new product initiatives.
- Work closely with the Privacy Legal team on cross-functional initiatives.
- Provide leadership and mentorship to junior privacy team members, supporting their development and growth.
- Identify opportunities for process improvement, automation, and operational efficiency across privacy workflows.
- 4–6 years of privacy compliance or data protection experience in a regulated industry (e.g., gaming, financial services, healthcare, or technology) (required)
- Demonstrated experience managing privacy frameworks, PIAs, and privacy rights requests across multiple regulatory regimes (e.g., US, Canada, UK GDPR) (required)
- Experience leading and mentoring team members (required)
- Strong ability to interpret and apply privacy laws, regulations, and policies (required)
- Excellent written and verbal communication skills, with the ability to translate complex privacy concepts for diverse audiences (required)
- Strong attention to detail and analytical skills in assessing data processing activities and risks (required)
- Ability to manage multiple priorities and adapt in a fast-changing regulatory environment (required)
- Proven ability to collaborate effectively across cross-functional teams and influence stakeholders (required)
- Strong problem-solving skills with the ability to independently drive initiatives and deliver practical solutions (required)
- Experience with privacy management tools and platforms, including DSAR and assessment workflows (required)
- Basic understanding of IT, data management and information security principles (required)
- Proficiency in Excel (required)
- Relevant certifications such as CIPP/US, CIPP/E, CIPM, or CIPT (preferred)
- A self-starter with strong ownership and follow-through (required)
- Ability to thrive in a fast-paced, high-growth environment (required)
- A collaborative team player with a desire to contribute to and grow within FanDuel Group (required)
- Health plans including programs for fertility and family planning, mental health support, and fitness benefits
- Generous paid time off (PTO & sick leave)
- Annual bonus and long-term incentive opportunities
- 401k with up to a 5% match
- Commuter benefits
- Pet insurance
- Medical, vision, and dental insurance
- Life insurance
- Disability insurance
- Short-term or long-term incentive compensation, including cash bonuses and stock program participation
- 14 paid company holidays
FanDuel Group is an innovative sports-tech entertainment company that is changing the way consumers engage with their favorite sports, teams, and leagues. The premier gaming destination in the North America, FanDuel Group consists of a portfolio of leading brands across gaming, sports betting, daily fantasy sports, advance-deposit wagering, and TV/media, including FanDuel, Stardust Casino and TVG. The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia. FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).
