Publicado originalmente en greenhouse · Aplica desde el sitio de la empresa para mejor experiencia.
Publicado originalmente en greenhouse · Aplica desde el sitio de la empresa para mejor experiencia.
<p><strong>Why Thunderbird?</strong></p> <p><span style="font-weight: 400;">Thunderbird is one of the world’s most trusted open-source email applications, empowering more than 20 million people globally. At MZLA, the team behind Thunderbird, we build privacy-respecting communication and productivity tools that help people manage their digital lives while staying in control of their data.</span></p> <p><span style="font-weight: 400;">We are open source by design. Our products are developed transparently and in collaboration with a global community of contributors, and that same spirit shapes how we work: collaboratively, inclusively, and with a shared commitment to putting users first.</span></p> <p><span style="font-weight: 400;">We are a small but growing company of 60+ people distributed across seven countries. As Thunderbird evolves beyond a single desktop application, we are expanding across desktop, mobile, paid services, and new product experiences that help people and organizations work more effectively without giving up control to big tech ecosystems.</span></p> <p><span style="font-weight: 400;">Our revenue model combines user donations, which help keep Thunderbird’s apps freely available, with paid services that cover the costs of hosted offerings while supporting long-term sustainability and continued innovation.</span></p> <p><strong>A note about MZLA and Mozilla: </strong>MZLA Technologies Corporation is the nonprofit-owned company behind Thunderbird and part of the Mozilla family. MZLA is separate from Mozilla Corporation and has its own compensation programs, benefits, and employment policies.</p> <p><span style="font-weight: 400;">To learn more, visit </span><a href="http://www.thunderbird.net"><span style="font-weight: 400;">www.thunderbird.net</span></a></p> <p><strong>The opportunity</strong></p> <p><span style="font-weight: 400;">Thunderbird is growing beyond our free desktop and mobile applications, and we’re looking for a Senior Privacy & Compliance Program Manager to help build and strengthen the privacy, compliance, data governance, and vendor review practices that support MZLA’s products and operations.</span></p> <p><span style="font-weight: 400;">Privacy and compliance are central to how we build and maintain user trust, particularly for a global user base with a significant presence in Europe. As MZLA expands its products and services, this role will help ensure that data is collected, used, shared, retained, and governed responsibly, in line with Thunderbird’s values and user trust commitments. You will help translate privacy, security, and compliance requirements into practical processes that fit our products and services, infrastructure, support workflows, vendor ecosystem, and operating model.</span></p> <p><span style="font-weight: 400;">MZLA is a small, growing organization, and the right person will be a hands-on program manager who can create structure without overcomplicating the work. You will work across legal, engineering, product, support, finance, operations, and other Mozilla-wide partners to clarify ownership, track open items, identify when issues need escalation, and keep cross-functional privacy and compliance work moving.</span></p> <p><span style="font-weight: 400;">This role requires strong judgment, excellent follow-through, and the ability to operate across legal, technical, operational, and leadership contexts. You will help ensure privacy and compliance work is well coordinated, appropriately documented, and grounded in practical processes that support user trust and responsible product development.</span></p> <p><span style="font-weight: 400;">This role requires regular overlap with Eastern Time working hours for meetings, collaboration, and time-sensitive coordination. We welcome candidates in other time zones who can consistently maintain meaningful overlap with ET.</span></p> <p><strong>What you’ll do </strong></p> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Coordinate MZLA’s privacy and compliance program work, including planning, recurring reviews, risk tracking, documentation, and leadership reporting.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Translate privacy, security, and compliance requirements into practical processes that fit how MZLA works.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Coordinate vendor and tool reviews with legal, engineering, product, support, finance, operations, and other stakeholders.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Help document data flows, subprocessors, and privacy, security, contractual, and operational considerations.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Support privacy operations and data governance for a global user base, including DSAR and privacy-rights workflows.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Help develop and maintain practical data inventories, records of processing, retention practices, and privacy-related documentation.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Partner with technical teams to support privacy-by-design practices for new products, services, tools, and data-processing activities.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Support compliance and audit-readiness efforts, including ISO-related readiness, evidence tracking, access reviews, and remediation follow-up.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Help strengthen incident response readiness by clarifying roles, escalation paths, documentation expectations, and coordination needs.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Build lightweight guidance, checklists, templates, and training materials that help teams meet privacy and compliance expectations without creating unnecessary bureaucracy.</span></li> </ul> <p><strong>What you bring </strong></p> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">8+ years of relevant professional experience, preferably within a software, SaaS, technology, or technical product environment.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">5+ years of direct or closely related hands-on experience in privacy operations, compliance program management, GRC, legal operations, security compliance, vendor governance, data governance, or a similar function.</span></li> <li style="font-weight: 400;">Experience coordinating cross-functional programs across legal, engineering, product, support, finance, and operations teams, including work with external counsel, advisors, auditors, consultants, or vendors to move complex work forward.</li> <li style="font-weight: 400;"><span style="font-weight: 400;">Experience supporting vendor, tool, or subprocessor reviews, including privacy, security, legal, and operational risk considerations.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Experience supporting privacy operations, data governance, or user-rights workflows for products or services with international users, including areas such as GDPR or EU privacy requirements, DSARs, deletion or export requests, data inventories, records of processing, retention, access controls, or privacy policy maintenance.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Technical fluency and the ability to work with technical teams to understand how data moves through systems, including cloud services, vendor tools, support systems, logs, telemetry, authentication, access permissions, and data storage.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Familiarity with incident response, breach readiness, or security/privacy escalation processes.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;"