Jobs › Data Privacy & Governance Manager

Data Privacy & Governance Manager

Grainger

Role at a glance

Category: Privacy
Work arrangement: Hybrid
Location: Lake Forest, IL
Salary range: $120,000 to $165,000
Posted: Jul 20, 2026

Apply for this roleApplications go directly to Grainger

Grainger is hiring a Data Privacy & Governance Manager in Lake Forest, IL. This is a Privacy role in the governance, risk, and compliance field, with a posted range of $120,000 to $165,000. Review the full details below and apply directly with Grainger.

Drives enterprise privacy risk assessments, Privacy Impact Assessments (PIAs), and data governance initiatives across commercial e-commerce platforms. Manages compliance with US state privacy regulations (CCPA/CPRA, CPA) and cross-border data transfer controls. Partners with InfoSec and Legal to maintain corporate data maps and consent

Full responsibilities and requirements are on Grainger's application page.

Apply for this role →

About Grainger

Hiring for governance, risk, and compliance roles on GRC Careers.

Browse all Grainger roles →

Location and market context

This role is based in Lake Forest, IL on a hybrid schedule. Local candidates benefit from being close to Grainger's teams and regional hiring market, while the hybrid arrangement offers some flexibility. Confirm the exact in-office expectation and any relocation support with the employer.

About privacy roles

Privacy roles protect personal data across its lifecycle, from data mapping and DPIAs to individual-rights handling. AI systems are widening the scope of what privacy teams must review. Roles like this one are typically evaluated against frameworks such as GDPR, CCPA and US state privacy laws, ISO/IEC 27701, and privacy-by-design practices.

How to position yourself for this privacy role

Strong candidates emphasize data mapping and inventories, privacy impact assessments, rights handling, and building privacy-by-design into products and AI systems. In your resume and outreach, tie your experience to how Grainger would apply GDPR, CCPA and US state privacy laws, ISO/IEC 27701, and privacy-by-design practices, and lead with concrete outcomes rather than duties.