Manager, Privacy, Risk & Controls

The posting

We are an American luxury lifestyle brand, founded in 2004. Anchored in the casual elegance of American sportswear, Tory’s design philosophy is defined by effortless silhouettes, innovative materials, eclectic juxtapositions of color, and the tension of past and present. The collections include ready-to-wear, handbags, footwear, accessories, jewelry, home and beauty.

Empowering women is the company’s guiding principle, expressed through Tory’s collections and reflected in the company culture as well as the work of the Tory Burch Foundation. Established in 2009, the Foundation provides women entrepreneurs in the United States with access to capital, education and community.

You are seeking a work environment where people are encouraged to dream, explore, discover and, as important, laugh together. If you’re prepared to work hard, create impact, and have fun while doing it, we would love to have you join #TeamTory. Apply today!

Life @ToryBurch is Special Because:

When you join us, you’re joining a global, purpose-led company on an exciting growth journey with an amazing culture and great benefits.

• Our culture is welcoming and inclusive -- everyone is empowered to make a difference.
• We have the best team in the world and believe in paying competitively and rewarding for high performance.
• Your overall well-being is important to us; we offer generous benefits to help you take care of your mental and physical health, create financial security, and achieve wellness in all areas of your life.
• We love seeing our employees wear our beautiful collections. You’ll receive a generous employee discount and access to exclusive sample sales.
• We are invested in your professional growth – you’ll have access to free executive coaching on-demand.
• We believe in the importance of giving back and you’ll have many opportunities to do just that through the Tory Burch Foundation and paid volunteer days.

This Role is Tailor-Made for You Because:

You operate comfortably at the intersection of technology, data, privacy, risk, and control design, and you know how to drive work forward across multiple teams. You are not focused on policy administration or audit coordination alone. You care about how data moves through the organization, how controls operate inside systems, and how people, timelines, and dependencies must come together to implement them effectively. In this role, you will translate privacy, data protection, governance, PCI, and SOX requirements into practical technical and operational controls. You will partner closely with engineering, data, platform, security, legal, and business teams to embed privacy and risk considerations into architecture, design, and implementation decisions. You will own enterprise data mapping, data inventories, and data flow analysis, helping the organization maintain a reliable understanding of how data is collected, processed, shared, retained, and protected. You will also help identify and manage broader risks and controls related to data protection and governance. While you will help manage tooling such as OneTrust, the core of the role is hands-on control ownership, technical understanding, structured program execution, and consistent follow-through.

A Day in the Life:

The work is varied, but it consistently centers on understanding systems and data, designing effective controls, and driving coordinated execution across teams.

· Own enterprise data mapping, data inventories, and data flow analysis using OneTrust and direct system analysis. Maintain an accurate understanding of how sensitive and regulated data is collected, processed, stored, shared, retained, and disposed of across the environment.

· Translate legal, regulatory, policy, and governance requirements into clear technical and operational control requirements that engineering, data, platform, and business teams can implement.

· Work directly with engineering, data, platform, security, legal, and business teams to understand system behavior, data pipelines, integration points, access models, control points, and implementation constraints.

· Identify privacy, data protection, and data governance risks. Define practical mitigation approaches and drive the work required to close identified gaps.

· Lead and actively participate in privacy working sessions and privacy committee meetings in conjunction with General Counsel and internal and external privacy and compliance counsel. Maintain active agendas, document decisions, track actions, and drive follow-up activities to completion.

· Drive implementation and continuous improvement of privacy workflows, including consent management; data access, deletion, and correction requests; and data retention and disposal enforcement.

· Lead and validate data discovery, classification, and inventory efforts across systems and platforms. Partner with identity and platform teams to align access controls with data sensitivity and applicable requirements.

· Act as a privacy, risk, and control voice in architecture and change reviews. Identify data protection risks, required control behaviors, and delivery dependencies early in the lifecycle.

· Design, implement, and oversee technical and operational controls supporting privacy, data protection, governance, PCI, and SOX. Be able to explain how those controls function in practice and how they reduce risk.

· Manage control-related initiatives as structured programs by defining scope, milestones, owners, dependencies, evidence, and success criteria, and by tracking progress through completion.

· Work with privacy and security tooling, including OneTrust, consent management platforms, data discovery and classification technologies, and DSAR solutions, to ensure they are integrated into operational systems and workflows rather than operating in isolation.

· Perform targeted control reviews to confirm controls are implemented, operating as designed, and producing expected outcomes. Support audits by clearly explaining control intent and operation and ensuring documentation reflects actual practices.

To Land This Role:

· Bachelor's degree in technology, information systems, cybersecurity, data management, or a related field, or equivalent practical experience.

· Seven+ years of experience in privacy, security, risk, compliance, data governance, or control-focused roles with meaningful hands-on technical exposure.

· Demonstrated experience translating regulatory, legal, policy, or governance requirements into technical or operational controls.

· Experience owning or materially contributing to enterprise data mapping, data inventories, records of processing, or data flow analysis.

· Strong understanding of privacy and data protection principles, data governance practices, and risk and control concepts.

· Working knowledge of PCI and SOX controls and the ability to assess how controls operate within systems and business processes.

· Experience with OneTrust for data mapping, inventories, assessments, consent, or DSAR workflows. Experience with complementary data discovery, classification, or governance tooling is beneficial.

· Ability to work directly with engineering, data, legal, security, and business teams to understand system behavior, data flows, access models, and implementation constraints.

· Strong program and project management skills, including the ability to plan cross-functional work, manage timelines, track dependencies, lead working sessions, and drive initiatives to completion.

· Comfort discussing systems, integrations, access controls, data pipelines, cloud platforms, and technical control operation with engineering teams.

· Strong written and verbal communication skills, with the ability to explain risk, control intent, technical implementation details, and execution status to both technical and legal stakeholders.

· Professional certifications such as Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), Certified Data Privacy Solutions Engineer (CDPSE), or comparable credentials are highly desirable, particularly where they demonstrate applied experience operationalizing privacy and data protection requirements.

Why You'll Want to Join Our Team:

Our Technology team has a clear mission: use technology to enable the business to operate efficiently while driving growth and profitability. We envision, we strategize, we engineer, we design, we build, we test, we support, and we serve. Our tools and systems impact every customer and every member of our team every day and our role is to make each engagement seamless and rewarding. As we build our in-house engineering teams, we are focused on further modernizing our platforms, leveraging our data analytics capabilities and creating a transformational customer experience. Come join us!

How We Work Together

• Adaptable – We change before we have to
• Entrepreneurial – We own it
• Collaborative – There’s no “I” in Tory
• Client & Brand Focused – We put ourselves in Tory’s shoes
• Live the Values – We show up for each other
• Functional Expertise – We’re constantly learning and growing

#TeamTory Values

We show up with honesty & kindness, act with integrity & compassion, work with passion & humility and lead with excellence & humor.

Compensation Range

The compensation range for this position is 140,000.00 USD - 180,000.00 USD. Our offer will be based on your relevant experience and work location.

Benefits Information

We offer a generous set of benefits to help you take care of your health, create financial security, and achieve wellness in all areas of your life. Here are highlights of key benefits available to all eligible Tory Burch team members.

Equal Employment Opportunity Statement

Tory Burch LLC is an Equal Employment Opportunity employer and provides equal opportunities to all employees and applicants without regard to an individual’s age, race, creed, color, religion, national origin, sex (including pregnancy) or sexual orientation, gender expression, military status, marital status, genetic predisposition or carrier status, disability or membership in any other protected class under applicable law. Likewise, we will consider qualified applicants with criminal histories for employment in a manner consistent with the requirements of the Los Angeles Fair Chance Initiative for Hiring, Ordinance No. 184652. Pursuant to the San Francisco Fair Chance Ordinance, we will consider qualified applicants with arrest and conviction records for employment.

Disability Accommodation

Tory Burch is committed to providing reasonable accommodations to applicants and employees with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require assistance or an accommodation with the hiring process, please contact [email protected].