Product Operations, Security & Compliance

Claylabs
New York, NY
Hybrid

Who this role is best for

Aimed at mid-level to senior Product Operations professionals who build operational systems at the intersection of security, legal, and business functions.

Best fit for

  • Candidates with experience in SaaS vendor management and compliance frameworks like GDPR or CCPA
    — “2+ years of experience building and scaling operational programs, ideally in a SaaS or tech environment”
  • Individuals who have managed data privacy processes and DSAR requests in prior roles
    — “Familiarity with DSAR processes and compliance tools like Vanta, Transcend, or similar platforms”
  • Candidates with a strong background in risk assessment and security questionnaires for vendor onboarding
    — “Experience with vendor risk assessments, security questionnaires, and DPA/subprocessor management”

Things to consider

  • This role demands independent ownership of end-to-end programs, not just coordination
    — “You'll own programs end-to-end, not just coordinate projects”
  • The position requires working across multiple teams, including legal and engineering
    — “Work at the intersection of engineering, security, legal and business teams”

How to stand out

  • Highlight specific vendor onboarding or DSAR management projects in your resume and interview answers
    — “Build and own the end-to-end vendor onboarding compliance process”
  • Emphasize your ability to create new operational systems, not just maintain existing ones
    — “Strong builder mindset: you're excited to create processes and systems from scratch, not just maintain existing ones”
Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • Built scalable processes for vendor management
  • Improved compliance across teams
Typical background
Experience in product operations or similar operational role

Skills & requirements

Required

Vendor ManagementData PrivacySecurity ComplianceProcess DesignCross-functional Collaboration

Preferred

Legal ComplianceVendor Onboarding

About the role

Original posting from Claylabs via Ashby

ABOUT CLAY

AI is unleashing the biggest wave of company creation in history. Clay's mission is to be the engine those companies use to grow to their full potential.

Clay predicts the next best action for your business and then helps you take it. We started by aggregating the best data for B2B companies. Then, we built the infrastructure to run any personalized campaign on top of it, including emails, ads, landing pages, and workflows that make reps more productive. Now, we're building agents that can help grow your company for you. We're already helping thousands of customers — including Anthropic, OpenAI, Google, and Visa — go to market with unique data, signals, and AI research.

In 2026, we raised a $115M Series D https://www.linkedin.com/safety/go/?url=https%3A%2F%2Fwww.nytimes.com%2F2026%2F09%2F09%2Fbusiness%2Fdealbook%2Fclay-ai-fundraising.html%3Fsmid%3Durl-share%26unlocked_article_code%3D1._1A.E5rN.MeYsbgEsUKbB&urlhash=XS4q&mt=4bpSf4a8omAKuAHqAqZx6C11QpbLK_QwIhSV7gSf4Wf9aywPF_KBSiX9IkWE1AhXBEjPH8mK6fAEN7CMFlpvo0lPAtKRjs-dhgzYqHiVKUMCRtw0jScFgxWCRRfYs4HCX0YL9L6PCQz-edBLinvRdU_TaVUL2dA3&isSdui=true&lipi=urn%3Ali%3Apage%3Ad_flagship3_feed%3BoQmIsufoRJm7X2HC5Rqd%2Fw%3D%3D at $7.1B Valuation led by Wellington — and are on track to cross $200M in revenue this quarter. We also launched a $1M Scholarship fund for GTME Education.

Some things to know about us:

  • Our community http://community.clay.com includes 17,000+ customers, 200+ integration partners, 125+ agencies, 50+ Clay clubs https://luma.com/claylive, and 30k members on Slack.
  • Our culture https://nextplayso.substack.com/p/spotlight-clay is unique inside and outside of work. Our team members are also DJs, activists, writers, clowns, marathoners, skydivers, psychedelic therapists, social workers, and more.
  • All employees can work with world-class coaches who specialize in creativity, management, and more.
  • Our operating principles — including negative maintenance and non-attached action — guide our work. Read more about them here https://cdn.prod.website-files.com/61477f2c24a826836f969afe/685d83a71452245cc1129791_4d770abfd83e276ec15315a2e06945bd_Clay2025_OperatingPrinciples.pdf.
  • Read about us in the NYT https://www.nytimes.com/2025/08/05/business/dealbook/clay-ai-marketing-fundraise.html, Forbes http://google.com/search?q=forbes+clay&rlz=1C5OZZY_enUS1155US1155&oq=forbes+clay&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIHCAEQABiABDIHCAIQABiABDIHCAMQABiABDIHCAQQABiABDIHCAUQABiABDIHCAYQABiABDIHCAcQABiABDIHCAgQABiABDIHCAkQABiABNIBBzkzM2owajSoAgOwAgHxBVAe8UAxJx_p&sourceid=chrome&ie=UTF-8, First Round Review https://review.firstround.com/podcast/inside-clays-unconventional-path-to-1-25b/, and more https://www.clay.com/press.

Hear from our employees directly on our Glassdoor https://www.glassdoor.com/Overview/Working-at-Clay-EI_IE9850794.11,15.htm page!

PRODUCT OPERATIONS @ CLAY

As Clay continues to scale, privacy and compliance have become core to how we operate and build trust with our customers. We're looking for a Product Operations individual contributor to build and own the operational systems that keep us compliant across vendor management, data privacy, and security. You'll be creating scalable processes from scratch to support teams across the company as they onboard vendors and handle customer information. You'll work at the intersection of engineering, security, legal and business teams to build processes that scales with our growth.

WHAT YOU'LL DO:

  • Vendor Onboarding & Risk Management: Build and own the end-to-end vendor onboarding compliance process. When teams want to onboard a new vendor, conduct proper review (DPA, SOC 2/GDPR data compliance), update our subprocessor list, and manage customer notifications
  • GRC Vendor Management: Serve as the internal owner and point of contact for external GRC vendors. Manage intake, ticketing, SLAs, quality review, and performance metrics to ensure security and compliance requests are tracked, resolved, and continuously improved
  • Data Privacy Program Management: Ensure teams and systems are integrated into our Clay’s compliance tools and framework, include for data subject access/deletion rights (DSAR). Partner with Security, Legal, Marketing, Data, and other stakeholders to scale privacy-by-design practices
  • Compliance Reviews: Build processes for and complete compliance reviews when teams evaluate purchasing new data sets and vendor compliance.
  • Cross-Functional Program Building: Create operational processes and systems from scratch to scale compliance work across the company. You'll own programs end-to-end, not just coordinate projects
  • Customer Security Support: Assist in responding to security and privacy questionnaires from prospective and existing customers, with a particular focus on privacy, data protection, and compliance-related questions

WHAT YOU'LL BRING

  • Bachelor's degree in Information Security, Business, or a related field (or equivalent experience)
  • 2+ years of experience building and scaling operational programs, ideally in a SaaS or tech environment
  • Strong builder mindset: you're excited to create processes and systems from scratch, not just maintain existing ones
  • Understanding of privacy laws and frameworks (GDPR, CCPA/CPRA, etc.) with the ability to apply them practically across vendor management, data flows, and employee compliance
  • Experience with vendor risk assessments, security questionnaires, and DPA/subprocessor management
  • Familiarity with DSAR processes and compliance tools like Vanta, Transcend, or similar platforms
  • Excellent project management skills with the ability to drive complex, cross-functional initiatives to completion
  • Strong communication skills for partnering with legal, engineering, data teams, and business stakeholders
  • Ability to work independently, prioritize effectively, and adapt in a fast-paced, high-growth environment

BONUS POINTS

  • Knowledge of additional compliance standards (e.g., ISO 27001, SOC 2)
  • Experience with data mapping, privacy impact assessments (PIAs), or incident response in a privacy context
  • Technical aptitude for understanding SaaS infrastructure and data flows

Source: Claylabs careers (Ashby)

Similar roles