Jobs › CCPA / CPRA
CCPA and CPRA (California Privacy) Jobs
The CCPA, as amended by the CPRA, is California's privacy law and the leading US state privacy regime.
The California Consumer Privacy Act (CCPA), in effect since 2020 and significantly expanded by the California Privacy Rights Act (CPRA) from January 2023, is the most influential state privacy law in the United States. It gives California residents rights to know, delete, correct, and opt out of the sale or sharing of their personal information, and it created a dedicated regulator, the California Privacy Protection Agency, to enforce and make rules. The CPRA added protections for sensitive personal information and obligations around data minimization, retention, and risk assessments.
California set the pattern that Virginia, Colorado, Connecticut, Texas, and a growing list of states have adapted, so a CCPA/CPRA program is usually the foundation of a US multistate privacy operation. For privacy and governance professionals, it is the most commonly required US framework after the GDPR, and the two together cover most of the global privacy map.
CCPA / CPRA: Frequently Asked Questions
What is the difference between the CCPA and the CPRA?
The CPRA is a 2020 ballot measure that amended and expanded the CCPA. It took effect in January 2023, added rights and protections for sensitive personal information, and created the California Privacy Protection Agency.
Who has to comply with the CCPA/CPRA?
For-profit businesses that handle California residents' personal information and meet thresholds on revenue, data volume, or data-sale activity.
Does the CCPA apply to businesses outside California?
Yes. A business anywhere must comply if it meets the thresholds and handles the personal information of California residents.
Open CCPA / CPRA GRC jobs (65)
Security Engineer, Corporate Security
Security Engineer
Manager, Privacy Compliance
Quantitative Strategist – Rates Intraday Risk - Vice President
Business Line Anti-Financial Crime Advisory – Client Risk Appetite Monitoring - Vice President
Privacy and Regulatory Counsel – Silicon Valley, CA (Remote) (1005-SLS)
Americas AFC Risk Appetite Reporting - Vice President
Manager, Software Engineering (Marketing and Privacy Engineering)
CRO Strategy & Execution Assistant to Americas Chief Risk Officer
Divisional Control Office (DCO), Investment Bank (Non-Financial Risk & Regulatory Adherence) - Vice President
Compliance Director, Trust Company and Custody Operations
GRC Engineer
Compliance Manager
Senior Compliance Analyst, Customer Trust
Third-Party Risk Management (TPRM) Risk Analyst
IT Risk & Information Security Analyst
Global Sanctions Advisory Oversight Specialist - Vice President
Client Due Diligence (KYC) Assurance Manager
Network Security & Cyber Resilience Project Manager - Assistant Vice President
ESG Data Modeler - Assistant Vice President
Director, Litigation and Regulatory
GRC, Data Privacy & Technical Cybersecurity SME - Senior Manager
Staff Product Manager, Compliance
Associate, Financial Crimes Compliance
Corporate Bank Sanctions Advisory Officer - Assistant Vice President
Senior Manager, Accounts Payable & Freight Audit
US Rates - Rates Market Risk Manager – Vice President
Senior Director, Product, Security and Privacy
Sr Legal Counsel VP (Vendor Contracts / Privacy)
Incident Response Manager - Privacy
Lead Security Compliance Engineer
Head of Energy Compliance, Americas - Director
GRC Principal - Data Privacy and Security
Associate General Counsel, Privacy – Remote (USA) (993-SLS)
Senior Risk Analyst
Senior Risk & Governance Engineer
Transaction Processing Operational Risk Manager - Vice President
Commercial Real Estate Risk Officer - Assistant Vice President
Credit Risk Manager, Wealth Management – U.S. Commercial Real Estate - Vice President
Divisional Risk and Control Specialist – Cash Management
Privacy Manager
Head of FIC Compliance, Americas - Director
Cybersecurity Requirements and Data Protection Lead
Credit Risk Officer, Energy Trading Credit Risk Management - Vice President
Latin America Credit Risk Officer - Assistant Vice President
Data Privacy and Security Counsel (US Federal)
Patient Privacy Officer & Counsel
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Staff+ Software Engineer, Privacy
Privacy Operations Program Manager
Staff+ Software Engineer, Privacy
Sr. Counsel, Privacy Compliance
Director, Privacy Counsel
Governance, Risk & Compliance Analyst
Senior AI Governance Counsel
Virtual CISO & Cybersecurity Practice Lead
Security, Risk and Compliance Consultant
Director, Compliance & AI Governance
Staff Software Engineer - Data Governance
CCPA / CPRA jobs: what the market looks like right now
A snapshot built from the 65 CCPA / CPRA roles currently on this page.
What these roles pay by level
| Level | Median midpoint | Postings |
|---|---|---|
| Mid-level | $197k | 12 |
| Senior / lead / manager | $179k | 7 |
| Executive / C-suite | $174k | 19 |
How these figures were calculated, and sources
Primary source: our own board. Every figure above is the median midpoint of the salary ranges published in the live postings on this page. Nothing is estimated, modeled, or carried over from a previous month. It is recalculated each time the board refreshes.
What is included. Only postings that publish a salary range. Hourly, weekly and monthly rates are annualised (2,080 hours, 52 weeks, 12 months). Ranges below $20,000 a year are excluded as data-entry placeholders. A seniority band is shown only when at least five postings support it; director is present on this page but below that threshold, so no median is published for that band.
What this is not. These are advertised ranges, not accepted offers. Advertised ranges tend to run wider than what is actually paid, and roles that do not publish a range are missing from the calculation entirely, which can bias the result upward.
For an independent benchmark, compare against the U.S. Bureau of Labor Statistics Occupational Employment and Wage Statistics for SOC 13-1041 — Compliance Officers, published annually at bls.gov/oes. BLS reports actual wages across all employers rather than advertised ranges, so its medians normally sit below job-board figures.
Where the work is
- Work mode: 13 remote, 0 hybrid, 52 on-site or unstated.
- Seniority mix: mid (23), executive (19), senior (18), director (5)
- Employers hiring more than one: Deutsche Bank (19), SEI (8), Anthropic (3), Solutus Legal Search (2), Vestwell (2), Reflection AI (2)
Skills these postings ask for
- data mapping and records of processing
- DSAR and rights request handling
- privacy impact assessments (DPIA/PIA)
- GDPR and CCPA/CPRA application
- vendor and transfer assessments
How to get a privacy job — the full career guide for this field: entry routes, transferable backgrounds, certifications and salary by level.
Certifications that come up most
None of these are universally required, but they appear often enough in CCPA / CPRA postings to be worth knowing: CIPP/US, CIPP/E, CIPM, CIPT, AIGP. The certification academy covers what each one actually tests and who it is for.
Hiring for CCPA / CPRA?
We have 65 open CCPA / CPRA roles on the board right now. Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
Post a job Pricing from $99 · About GRC Careers · Hiring toolkit
All GRC jobs · Job alerts