Privacy Manager

Who we are

Virgin Galactic, www.VirginGalactic.com (SPCE:NYSE), recognizes that the answers to many of the challenges we face in sustaining life on our beautiful but fragile planet, lie in making better use of space. Sending people to space has not only expanded our understanding of science, but taught us amazing things about human ingenuity, physiology and psychology. From space, we are able to look with a new perspective both outward and back. From space, the borders that are fought over on Earth are arbitrary lines. From space, it is clear that there is much more that unites us than divides us.

“We are at the vanguard of a new industry determined to pioneer twenty-first century spacecraft, which will open space to everybody — and change the world for good.” Sir Richard Branson, Founder, Virgin Galactic.

Our Values

Virgin Galactic has a relaxed and informal culture that encourages individuality and innovation. You will be motivated, enterprising, and enthusiastic. Company culture is such that you need to be able to “check your ego at the door,” be a self-starter and possess a sense of humility. You will work well under pressure and thrive on being given challenges and responsibility. You will communicate clearly and be confident and persuasive. You will have a high level of integrity and understand the need of complete confidentiality.

Virgin Galactic is seeking an experienced professional with a passion for privacy. The Privacy Manager is responsible for VG’s growing Privacy Program including its daily operations, development and maintenance of policies and procedures, supporting company stakeholders in various global business segments, with a key focus on implementing, overseeing and ensuring compliance and conformity to applicable privacy and data protection laws for Virgin Galactic's Privacy Program.

All candidates must be local to our Tustin CA headquarters and willing to work in office 2x a week on a hybrid schedule.

• Leveraging our Data Protection Office and privacy consultants, implement our strategy for the protection of personal employee and customer data by enhancing and managing our privacy program
• Define, develop, implement, and maintain our policies and processes that enable consistent, effective privacy practices that minimize risk and ensure the confidentiality of protected information, paper and/or electronic, across all media types and comply with applicable privacy laws and regulations
• Provide an important leadership role for Virgin Galactic privacy compliance and culture
• Provide guidance to business privacy coordinators across the organization
• Work closely with key business and functional leaders within the company to ensure compliance with global and local laws and privacy practices
• Communicate progress to senior leadership
• Coordinate with privacy stakeholders across business units, security, and corporate compliance, to manage the governance of our privacy program
• Keep business leaders informed of industry trends and data privacy issues
• Oversee privacy risk assessment, remediation of gaps and monitoring
• Develop and oversee privacy training to the workforce as well as appropriate third parties
• Working with relevant consultants or privacy specialists, create comprehensive incident response plans in the event of an unauthorized disclosure of customer and employee data
• Participate in new business initiatives and product development activities to promote and implement functionality necessary to support required compliance capabilities (ie, Privacy by design)
• Collaborate with Technology and Information Security departments to ensure that data security practices satisfy with privacy and compliance requirements
• Serve as an external point of contact regarding the company’s data practices and compliance procedures, coordinating with our DPO, privacy counsel, and UK/EU privacy representatives
• Assist in other duties as needed and directed

• Bachelor’s or advanced degree in the field of law, cybersecurity, information technology, business, economics or related to technology
• 5 years of experience in a privacy and data protection leadership role
• 3 years of program management experience, including change management, project management, stakeholder management, user training, and communications
• Knowledge and experience in US state and federal information privacy regulations, including but not limited to:
  • Health Insurance Portability and Accountability Act (HIPAA)
  • California Consumer Privacy Act (CCPA) and CPRA
• Knowledge of Global Privacy Laws, including but not limited to:
  • European Union and UK General Data Protection Regulation (GDPR)
  • Canadian Privacy Laws (PIPEDA, CPPA and provincial and territorial laws)
  • Australian Privacy Laws (Privacy Act 1988…)
• IAPP Certification highly preferred, especially CIPP/US/E and/or CIPT, CIPM
• Excellent organization, facilitation, written and oral communication, and presentation skills
• Demonstrated experience with meeting and dealing with people at all levels of the organization in an efficient and tactful manner

• Strong experience with and knowledge of Microsoft Office Suite applications – intermediate to advanced skills with Outlook, Word, and Excel are strongly preferred
• Good organizational skills and strong attention to detail are required
• Problem solver, able to troubleshoot issues independently or escalate, when necessary, sense of accountability and sound judgment
• Experience writing policy and procedures
• Working knowledge of NIST 800-53, ISO 27002, PCI DSS, and SOC standards
• Must be a “U.S. person” as defined by the ITAR (22 CFR §120.15).