Tory Burch Privacy, Risk and Controls Manager

About Tory Burch

Founded in New York in 2004, Tory Burch is an American luxury lifestyle brand distinguished by its expressive use of color, signature prints and modern interpretation of classic style. Its collections span ready-to-wear, handbags, footwear and accessories, reaching an international clientele through a global retail and digital presence. As an employer, the company offers opportunities across design, merchandising, retail, technology and corporate functions, combining creative ambition with commercial expertise. Employees contribute to a founder-led business whose identity connects personal style with purpose. Women’s empowerment remains central to this identity, notably through the Tory Burch Foundation’s support for women entrepreneurs.

Role & Responsibilities

• Own enterprise data mapping, data inventories, and data flow analysis using OneTrust and direct system analysis; maintain an accurate understanding of how sensitive and regulated data is collected, processed, stored, shared, retained, and disposed of.
• Translate legal, regulatory, policy, and governance requirements into clear technical and operational controls for engineering, data, platform, and business teams to implement.
• Work with engineering, data, platform, security, legal, and business teams to understand system behavior, data pipelines, integration points, access models, control points, and implementation constraints.
• Identify privacy, data protection, and data governance risks; define practical mitigations and drive identified gaps to closure.
• Lead and participate in privacy working sessions and committee meetings with the General Counsel and internal and external privacy and compliance counsel; maintain agendas, document decisions, track actions, and complete follow-up.
• Drive implementation and continuous improvement of privacy workflows, including consent management; data access, deletion, and correction requests; and data retention and disposal enforcement.
• Lead and validate data discovery, classification, and inventory efforts across systems and platforms; partner with identity and platform teams to align access controls with data sensitivity and applicable requirements.
• Represent privacy, risk, and controls in architecture and change reviews; identify data protection risks, control requirements, and delivery dependencies early in the lifecycle.
• Design, implement, and oversee technical and operational controls for privacy, data protection, governance, PCI, and SOX, explaining how they operate and reduce risk.
• Manage control initiatives as structured programs by defining scope, milestones, owners, dependencies, evidence, and success criteria, and tracking progress through completion.
• Work with privacy and security tools, including OneTrust, consent management platforms, data discovery and classification technologies, and DSAR solutions, to integrate them into operational systems and workflows.
• Conduct targeted control reviews to verify controls are implemented, operating as designed, and producing expected outcomes; support audits by explaining control intent and operation and ensuring documentation reflects actual practices.

Qualifications

• Bachelor’s degree in technology, information systems, cybersecurity, data management, or a related field, or equivalent practical experience.
• At least 7 years of experience in privacy, security, risk, compliance, data governance, or control-focused roles with meaningful hands-on technical exposure.
• Demonstrated experience translating regulatory, legal, policy, or governance requirements into technical or operational controls.
• Experience owning or materially contributing to enterprise data mapping, data inventories, records of processing, or data flow analysis.
• Strong understanding of privacy and data protection principles, data governance practices, and risk and control concepts.
• Working knowledge of PCI and SOX controls and the ability to assess how they operate within systems and business processes.
• Experience with OneTrust for data mapping, inventories, assessments, consent, or DSAR workflows; experience with complementary data discovery, classification, or governance tools is beneficial.
• Ability to work directly with engineering, data, legal, security, and business teams to understand system behavior, data flows, access models, and implementation constraints.
• Strong program and project management capabilities, including planning cross-functional work, managing timelines, tracking dependencies, leading working sessions, and driving initiatives to completion.
• Comfort discussing systems, integrations, access controls, data pipelines, cloud platforms, and technical control operations with engineering teams.
• Strong written and verbal communication skills, including explaining risk, control intent, technical implementation details, and execution status to technical and legal stakeholders.
• Professional certifications such as Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), Certified Data Privacy Solutions Engineer (CDPSE), or comparable credentials are highly desirable, particularly when they demonstrate applied experience operationalizing privacy and data protection requirements.

Skills

Experience

At least 7 years in privacy, security, risk, compliance, data governance, or control-focused roles with meaningful hands-on technical exposure.

Education

Bachelor’s degree in technology, information systems, cybersecurity, data management, or a related field, or equivalent practical experience.

Compensation

The base compensation for this position ranges from USD 140,000 to USD 180,000 per annum.

Benefits

Generous employee discount; access to exclusive sample sales; free on-demand executive coaching; paid volunteer days; benefits supporting health, financial security, and wellness.

Culture

Tory Burch’s workplace culture reflects the brand’s entrepreneurial spirit and optimistic outlook, bringing together creative expression, commercial ambition and a collaborative approach to building a global fashion business. Its commitment to women’s empowerment gives the company a distinctive sense of purpose, connecting its identity as an employer with its broader mission to support women’s ambitions.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.