Sr Privacy & Consent Compliance Manager

Location: San Francisco, CA

Current Employees of Happen Bank: Please apply via your internal Workday Account

Happen Bank (formerly LendingClub) is built around a simple purpose: to clear the way to help people turn intention into action, and action into financial progress. That means offering focused products, a frictionless mobile-first experience, and clear terms with no gotchas. Respect and fairness is part of our DNA, and that ideal shapes how we work, how we treat each other, and how we invest in our employees and our community. Join us in using data, bold thinking, and a commitment to innovation to help clear the way for millions of Americans to achieve more.

About the Role

Happen Bank is seeking a Sr Privacy & Consent Compliance Manager to lead the Bank's privacy compliance and customer communication preferences programs. In this individual contributor role, you'll help protect customer information, ensure customer communication choices are honored, and maintain compliance with applicable privacy and communication regulations, including the Gramm-Leach-Bliley Act (GLBA), Regulation P, CAN-SPAM, the Telephone Consumer Protection Act (TCPA), and state privacy laws.

You'll partner closely with Legal, Compliance, Marketing, Technology, Operations, and business leaders to translate regulatory requirements into practical policies, controls, and customer experiences. You'll also serve as a trusted advisor to leadership, helping strengthen privacy practices, responsible data stewardship, and the thoughtful adoption of emerging technologies.

What You'll Do

Lead the design, implementation, and ongoing oversight of the Bank's privacy compliance program, ensuring adherence to GLBA, Regulation P, and applicable federal and state privacy laws and regulations

Monitor regulatory developments, including new and amended state privacy laws, agency guidance, and enforcement trends, and assess their impact on products, processes, and data practices

Own compliance requirements for customer communications under CAN-SPAM, TCPA, and related federal and state rules, including consent, revocation, and opt-out management across email, text, phone, direct mail, and digital channels

Establish and maintain customer communication preference standards, ensuring consent and opt-out requests are accurately captured, honored, synchronized across systems, and processed within required timeframes

Develop and maintain privacy policies, procedures, standards, customer-facing disclosures, and privacy notices, ensuring guidance remains accurate and current

Provide privacy and communication compliance guidance for new products, marketing campaigns, vendor relationships, data sharing arrangements, and technology initiatives, including privacy-by-design reviews

Conduct annual privacy risk assessments and ongoing compliance monitoring, identifying gaps and opportunities to strengthen controls and mitigate risk

Support regulatory examinations, internal and external audits, and regulator inquiries, including preparing responses, coordinating evidence, and developing and tracking corrective action plans through closure

Partner with Third-Party Risk Management to assess and oversee vendors that handle customer data or conduct communications on Happen Bank's behalf

Oversee the intake, investigation, and resolution of privacy-related complaints, inquiries, and incidents in coordination with Legal, Information Security, and Customer Care

Use AI thoughtfully to improve privacy and communication compliance activities, including monitoring, testing, regulatory change analysis, and complaint trend detection, while maintaining appropriate governance, validation, human oversight, and accountability

Deliver privacy training and awareness programs and develop clear reporting, metrics, and key risk indicators for leadership

About You

6+ years of experience in banking or financial services, primarily within compliance, risk management, or audit

Bachelor's degree or higher, or equivalent combination of education and experience

3+ years of direct experience in privacy compliance

Deep understanding of privacy regulations, including GLBA, Regulation P, applicable state privacy laws, CAN-SPAM, and TCPA, with the ability to apply requirements to real-world products and processes

Strong communication and influencing skills with the ability to build credibility, advise senior leaders, and drive alignment across organizational boundaries

Strong analytical and problem-solving skills with the ability to interpret ambiguous regulatory requirements and make sound, risk-based decisions

Ability to balance strategic priorities with detailed execution while managing competing demands in a regulated environment

Experience collaborating across Legal, Marketing, Technology, Operations, and business teams to support effective privacy and consent compliance practices

High standards of integrity, ethics, accountability, and attention to detail, with the ability to engage confidently with regulators, examiners, and auditors

You have hands-on experience using AI tools to accelerate your work and improve output quality, and you're comfortable sharing effective approaches with colleagues. You apply sound judgment around accuracy, data sensitivity, regulatory requirements, and where human validation and oversight remain essential

Additional Locations: New York, NY