Senior Privacy & Compliance Manager

About Tunnl

Tunnl is building a future where artificial intelligence enables organizations to connect meaningfully with the people who matter most. We help organizations conduct research at scale, define the right audiences, surface real-time insights, identify optimal communication channels, and measure changing attitudes over time.

Tunnl serves brands, agencies, and advocacy groups alike - organizations navigating complex communications, reputational, and regulatory landscapes. These teams need smarter, faster ways to make audience-informed decisions that stand up to scrutiny and resonate across stakeholder groups. Whether you're building a brand, shaping public opinion, managing risk, or launching a new initiative, Tunnl empowers you to move from insight to impact with clarity & confidence.

About the Role

As Tunnl's Senior Privacy & Compliance Manager, you'll be the operational backbone of our privacy program - translating legal and regulatory requirements into day-to-day processes, managing consumer opt-out operations, maintaining our data inventory, supporting incident response, and keeping our data intelligence and survey research businesses compliant with an evolving patchwork of U.S. privacy law.

You'll work in close collaboration with Tunnl's legal counsel and senior leadership, serving as the internal implementation and coordination hub for privacy across all of Tunnl's products and operations. This role reports directly to senior leadership and is a hands-on, execution-focused position suited for someone who thrives on building structure in a fast-moving environment.

What You'll Do

Privacy Program Operations

• Support the day-to-day operations of Tunnl's privacy compliance program, working in close coordination with legal counsel and leadership to ensure requirements are understood and consistently applied across the organization.
• In collaboration with counsel and leadership, translate legal and regulatory obligations into actionable policies, procedures, and controls - and partner with cross-functional stakeholders to implement them.
• Draft, update, and maintain privacy and data protection policies, procedures, standards, and guidelines.
• Maintain a privacy compliance calendar; flag upcoming registration deadlines and regulatory implementation timelines to leadership.
• Collaborate with Marketing and RevOps to implement the appropriate updates to policies hosted on the Tunnl website.
• Support the preparation of privacy reporting - dashboards, management reports, and KPIs - to track program maturity and compliance posture.
• Scale privacy awareness internally: build practical guidance and training that helps employees understand their obligations and handle data appropriately.

Consumer Rights & Opt-Out Operations

• Own and operate Tunnl's consumer opt-out, deletion, and data subject rights program - intake, processing, recordkeeping, and timely fulfillment in accordance with applicable law.
• Build and maintain opt-out and individual rights request workflows that scale as regulatory requirements and consumer volume grow.
• Serve as the primary point of contact for consumer privacy inquiries, complaints, and escalations.
• Support consent management practices across Tunnl's data collection and survey channels.
• Respond to privacy and security questionnaires from clients, partners, and vendors - coordinating with legal, engineering, and ops as needed.

Regulatory Compliance - Data Broker & Privacy Laws

• Manage Tunnl's data broker registrations and renewals across all applicable states (California, Texas, Oregon, Vermont, and others as new requirements take effect).
• Maintain working knowledge of applicable U.S. state privacy laws (CCPA/CPRA, CPA, VCDPA, etc.), FTC regulations, TCPA, CAN-SPAM, and other marketing privacy requirements - and support implementation of new obligations in collaboration with counsel.
• Conduct privacy gap analyses and risk assessments; develop action plans to mitigate identified risks and track remediation to completion, in collaboration with Tunnl counsel and leadership.
• Support privacy impact assessments (PIAs/DPIAs) for new products, features, data partnerships, and processing activities.
• Coordinate Tunnl's participation in audits, due diligence processes, and client privacy reviews.
• Support privacy due diligence for any mergers, acquisitions, or significant organizational changes.

Data Mapping & Inventory

• Build, maintain, and ensure the accuracy of Tunnl's data inventories and data flow maps - covering all systems, vendors, processing purposes, and business operations.
• Use data inventory information to support PIAs, vendor risk reviews, and internal compliance assessments.
• Partner with product and engineering to incorporate data mapping into new product development and vendor onboarding.

Survey Research Compliance

• Ensure Tunnl's survey business operates in accordance with applicable research e