Business Operations Program Manager in London

Who we are

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Privacy Operations is the authoritative operational hub for privacy processes, enabling high-quality privacy experiences for users and data subjects, and owning clear and auditable documentation for internal stakeholders and external regulators. We partner with Privacy Legal and Privacy Engineering to protect user data.

You'll drive end-to-end management across data subject requests, privacy impact assessments, records of processing activities, transfer impact assessments, and cookie compliance, making day-to-day decisions that keep operations regulatory-ready and auditable. You'll work as a key connector between Privacy Legal, Privacy Engineering, and cross-functional partners across the company, translating global privacy requirements into practical operations. As a primary point of contact for incoming privacy requests, you'll handle triage and routing, and build the playbooks and response libraries that allow the team to deliver high-quality, consistent privacy experiences for Stripe users and for the regulators who depend on clear, auditable records.

Responsibilities

• Own end-to-end program management across core privacy programs such as data subject requests (DSRs), PIAs and DPIAs, records of processing activities (ROPA), transfer impact assessments (TIAs), and cookie compliance, making day-to-day operational decisions, enforcing processes to ensure regulatory readiness, and measuring compliance at scale.
• Identify and implement process improvements, including leveraging AI tooling to automate routine tasks, developing structured workflows to sustain quality standards, and maintaining accurate, auditable program records including playbooks and process documentation.
• Create and maintain clear, auditable privacy documentation, including privacy assessments, program playbooks, and customer response libraries, to provide scalable, consistent privacy operational support.
• Work with Privacy Legal and Privacy Engineering to fulfill user requests, build and deepen expertise on global privacy and data-protection requirements, and escalate novel or complex requests with appropriate context and documentation.
• Rotate through the team's weekly runner model as the primary point of contact for incoming privacy requests, routing across intake channels and managing Jira run tickets.

Who you are

We're looking for someone who meets the minimum requirements to be considered for the role. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

• 5+ years of demonstrated privacy program management and a proven track record of operationalising and scaling cross-functional organisation-wide programs from the ground up.
• Excellent collaboration, communication, and relationship-building skills, and the ability to convey complex ideas succinctly to all audiences.
• Demonstrated experience with privacy legislation such as GDPR, CCPA, LGPD, and PIPEDA. Hands-on experience with privacy impact assessments (PIAs and DPIAs), data subject request workflows, records of processing activities (ROPA), or other core privacy program operations.
• Ability to analyze complex problems to identify root causes and trends, and to document complex narratives in a simplified way that others can use.
• Curious and self-motivated with a strong affinity for vision setting, strategic problem solving, and driving outcomes.
• Experienced in juggling multiple projects in a fast-paced, high-growth environment, with tight timelines and shifting priorities.
• A team player, willing to pitch in where needed.

Preferred qualifications

• Experience in fast-paced, high-growth environments. Demonstrated experience using AI to accelerate day-to-day privacy operations work.
• Experience with third-party risk management, RFP and DDQ response processes, or cross-border transfer assessments.
• Privacy certification such as CIPP/E, CIPP/US, or CIPM is a plus.