Senior Director, Data Governance & Privacy Operations (GRC)

TL;DR

Senior Director, Data Governance & Privacy Operations (GRC): Lead global privacy operations, third-party risk management, service delivery, and AI governance within the Technology segment with an accent on compliance with regulations, laws, and industry standards. Focus on championing Privacy-by-design, AI ethics, security in operations, negotiations, products, and service delivery.

Location: Remote (United States only; must be currently authorized to work in the US on a full-time basis, no visa sponsorship

Salary: $116500–$256000

Company

Leading global expert firm for organizations facing crisis and transformation with a Technology segment.

What you will do

• Partner with stakeholders to incorporate GRC, technical, and operational provisions into customer, vendor, and partner content including portals, Trust sites, DPAs, and agreements.
• Support transformation initiatives, interact with external counsel, senior leadership, and clients on scalable IT programs.
• Monitor data protection, cyber, and AI regulations (GDPR, CCPA, EU AI Act, etc.), assess applicability, and operationalize into workstreams.
• Perform audits and assessments (PIA, DPIA, TIA, AI impact assessments), maintain risk registers, and ensure privacy by design and AI governance.
• Review and negotiate client and third-party agreements, evaluate third-party compliance and risks.
• Build negotiation playbooks, risk matrices, data maps; govern risk exceptions; administer systems like Salesforce, TRUST site, TPRM, AI CLM.
• Champion new technology, policies, automation for ethical, secure, compliant solution deployment.

Requirements

• Currently authorized to work in the United States on a full-time basis; no visa sponsorship
• Bachelor's or Master's in computer science, engineering, law, or public policy.
• 5+ years in data governance, privacy, or AI governance/policy.
• 2+ years negotiating commercial agreements with data protection, AI terms, cloud ecosystems (Azure, AWS, Google Cloud).
• 15+ years total experience, 10+ in IT, info security, operational risk in SaaS/IaaS/hyperscale/hybrid cloud.
• Certifications: CIPP, AIGP, CRP, CRISC, or CRCM.
• Expert knowledge of GDPR, CCPA, HIPAA, NIST, ISO 27701/42001, etc.

Nice to have

• Juris Doctor or Master's in Law.
• Project management expertise.
• Experience with data governance platforms (OneTrust), vendor risk systems, CLM (Ironclad, etc.), ServiceNow.
• Privacy Enhancing Technologies.
• E-discovery or legal operations expertise.

Culture & Benefits

• Competitive compensation with bonus potential.
• Full benefits: medical, dental, vision, life/disability insurance, 401(k) match.
• Generous PTO, holidays, parental leave, family care benefits.
• Wellness platform, recognition programs, volunteering PTO, corporate matching donations.
• Professional development, certifications, coaching, career milestone programs.
• Flexible work arrangements, free snacks/drinks, perks/discounts.