Technical Program Manager - Trust and Safety
Zipline · San Francisco, United States · 14h ago
About Zipline
Zipline is the world’s largest and most experienced drone delivery service. We are on a mission to serve all humans equally by ensuring access to food, medicine and essential goods anytime, anywhere. We design, build, and operate the world’s largest autonomous logistics system, delivering critical supplies quickly and reliably. Today, Zipline operates on four continents, makes a delivery somewhere in the world every 30 seconds, and has completed millions of deliveries to date, including blood, vaccines, medical supplies, food, and retail products.
Our customers include the world’s largest and most prominent healthcare systems, governments, retailers, restaurants and global businesses who rely on us to save lives, reduce emissions, increase economic opportunity, and provide delivery from point A to point B as fast as possible. The drone is only 15% of what we’ve built to enable seamless, reliable, global operations.
Our system strengthens supply chains, reduces congestion, and gives people time back. With more than 140 million commercial autonomous miles safely flown, Zipline is redefining access to healthcare, consumer products, and food across the globe.
We operate at a global scale and are looking for practical problem solvers who thrive on real-world challenges and rapid growth. Our team is motivated by building systems that have a direct, meaningful impact on people’s lives and by scaling the future of logistics. We are seeking people who sculpt from first principles, enjoy facing adversity, and can do the impossible at record breaking speeds.
About You and The Role
Zipline is looking for a Technical Program Manager to lead privacy and trust programs across product, engineering, legal, security, operations, and commercial teams. This person will drive the systems, processes, and cross-functional execution needed to support privacy compliance, consumer rights requests, user deletion and correction workflows, account takeover response, fraud prevention, data retention, data mapping, and protection of personal information.
This is a highly cross-functional role for someone who can translate legal and compliance requirements into practical operating models, technical requirements, product changes, and durable business processes.
What You'll Do
- Manage Zipline’s operational program for consumer rights requests, including deletion, access, correction, opt-out, and other DSAR workflows.
- Partner with Legal, Security, Engineering, Product, Data, Customer Support, and Commercial teams to coordinate privacy requirements and implement scalable privacy processes and tooling.
- Maintain excellence across all of our data mapping processes and help keep inventories, flows, and related documentation current across Zipline’s marketplace, partner integrations, white-label services, operations tooling, support systems, data platforms, and third-party vendors.
- Own operationalization of Zipline’s policies across different services, partners, and jurisdictions, including implications for data use, retention, deletion, access, and contractual obligations.
- Drive implementation and architecture initiatives that support excellence in privacy and data management as products, services, and systems evolve
- Support our existing privacy and legal teams in key initiatives
- Coordinate privacy risk assessments for new products, integrations, data uses, partner launches, and material system changes.
- Support ongoing administration and improvement of policies and operational mechanisms for data retention, deletion schedules, legal holds, and records of processing activities.
- Partner with Security and IT on cybersecurity audits, access reviews, incident response readiness, account takeover prevention, fraud signals, and protection of personal information.
- Support initiatives around data protection agreements, vendor privacy requirements, partner obligations, and contractual data handling commitments.
- Lead measurement and reporting around program metrics, SLAs, dashboards, escalation paths, and reporting mechanisms for privacy and trust operations.
- Maintain and refine clear documentation, playbooks, decision logs, and repeatable processes that help teams move quickly while meeting privacy, legal, and security expectations.
What You'll Bring
- 8+ years of experience in technical program management, privacy operations, security program management, compliance operations, product operations, or a related role.
- Experience building or operating privacy programs, consumer rights request workflows, DSAR processes, deletion workflows, data retention programs, or data governance systems.
- Strong understanding of privacy concepts such as controller vs. processor roles, personal information inventories, data mapping, privacy impact assessments, data minimization, retention, and deletion.
- Working familiarity with U.S. state privacy laws, CCPA/CPRA, consumer rights programs, data protection agreements, and vendor privacy obligations.
- Ability to partner effectively with Legal and translate legal requirements into technical and operational execution plans.
- Strong technical fluency and comfort working with engineering teams on systems architecture, data flows, APIs, data stores, event logs, access controls, and operational tooling.
- Experience coordinating cross-functional programs across Product, Engineering, Legal, Security, IT, Support, Data, and business teams.
- Excellent written communication skills, with the ability to create clear documentation, process maps, executive updates, and implementation plans.
- Strong judgment, ownership, and ability to drive ambiguous programs from discovery through execution.
- Comfort operating in a fast-moving environment where the right answer may require building new mechanisms, aligning stakeholders, and improving systems over time.
Nice to Have
- Experience with privacy tooling, data discovery platforms, GRC tools, DSAR management platforms, ticketing systems, identity systems, or data cataloging tools.
- Experience with marketplace, logistics, robotics, aviation, healthcare, retail, financial technology, or other highly regulated operational environments.
- Experience supporting account takeover, fraud, trust and safety, abuse prevention, or customer identity programs.
- Experience with international privacy regimes such as GDPR or privacy requirements in multi-country operations.
- Privacy, security, or compliance certifications such as CIPP/US, CIPP/E, CIPM, CIPT, CISSP, CISA, or similar.
What Success Looks Like
You will help Zipline improve a durable privacy and trust foundation that supports marketplace growth, white-label partner services, regulatory compliance, user trust, and responsible use of data across the company.
What Else You Need To Know
The starting cash range for this role is $180,00 - $230,000; please note that this is a target, starting cash range for a candidate who meets the minimum qualifications for this role. We are always open to negotiation. The final cash pay for this role will depend on a variety of factors, including a specific candidate's experience, qualifications, skills, working location, and projected impact. The total compensation package for this role may also include: equity compensation; overtime pay; discretionary annual or performance bonuses; sales incentives; benefits such as medical, dental and vision insurance; paid time off; and more.
Zipline is an equal opportunity employer and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws or our own sensibilities.
We value diversity at Zipline and welcome applications from those who are traditionally underrepresented in tech. If you like the sound of this position but are not sure if you are the perfect fit, please apply!
Voluntary Self-Identification
For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.
As set forth in Zipline ’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.