John Manchester

Privacy Program Manager

Customer ServiceHelp Desk SupportChat SupportLive ChatCustomer Care SpecialistPodcast HostConsulting📝 Influencer or BloggerSecurity AnalystITC-level ExecutiveCPO⚖️ LegalCSOProject ManagerTech Support

Managed projects and supported teams to improve privacy outcomes for global users of the company’s platforms. • Led global privacy initiatives impacting over 3 billion users, aligning with international regulations and Meta’s internal governance. • Developed enterprise-wide privacy KPI/KRI frameworks to inform strategic investment and executive reporting. • Directed quarterly compliance reporting processes across legal, analytics, and product teams. • Evaluated emerging technologies for compliance implications, including AI-driven systems and privacy-enhancing technologies. • Designed workforce upskilling content aligned with IAPP certifications. • Maintained a collaborative partnership with key stakeholders (engineering, data science, data engineering, analytics, risk, legal, etc.) to ensure align between remediation efforts and organizational priorities. Managed Cybersecurity and Privacy programs enabling enhanced and accelerated achievement of organizational goals. • Directed cybersecurity and privacy governance aligned with NIST SP800-53, 800-171, and 800-61. • Authored cybersecurity policies, aligning with NIST SP800-53 and FISMA requirements. • Designed the organization’s privacy risk assessment framework and led its adoption. • Managed regulatory and institutional audits, enhancing data security and policy adherence. • Staying updated on global trends and industry best practices, authored global threat analysis briefings, directly supporting executive and research risk posture. • Strategic advisor to the Institutional Review Board ensuring compliance with HIPAA, and regulations pertaining to research involving human subjects. • Led technical documentation reviews and quality assurance for policies and procedures impacting NIH and federal partners. • Managed third-party risk management, reviewing SOC2 or other cyber performance reporting.