Director, Data Privacy Operations & Governance

DescriptionPosition at CMI Media GroupMake privacy practical—and build the systems that make it stick.Privacy requirements are evolving, and putting them into practice takes more than policies. We’re looking for a senior privacy leader to build and improve the governance, processes, and controls that help an agency work with data responsibly and consistently.In this cross-functional role, you’ll partner with Legal, Data Security, Supplier Management, Contracting, Client Leadership, Finance, Technology, and business teams. You’ll translate approved legal and regulatory guidance into clear operating standards people can use in their day-to-day work. You’ll also serve as a senior privacy representative in conversations with clients, client legal and privacy teams, data and media suppliers, and other external partners.What you’ll doEstablish and improve the privacy operating model, including governance, decision rights, accountability, controls, documentation, and escalation pathways.Develop practical privacy policies, SOPs, playbooks, decision frameworks, and training.Partner with Legal to operationalize approved guidance on evolving U.S. federal and state requirements, including data broker obligations, consumer health data, and advertising and media privacy.Oversee applicable data broker registrations and reporting, as well as consumer privacy rights processes for access, deletion, correction, and opt-outs, including Do Not Sell or Share requests.Lead or coordinate privacy impact, data-use, and third-party risk assessments involving suppliers, media partners, technologies, AI solutions, client services, and business processes. Recommend controls proportionate to the risks.Work with Legal, Contracting, and Supplier Management to support privacy-related contract reviews and turn approved obligations into workable processes and controls.Represent the agency’s privacy practices in client, supplier, and partner discussions; communicate requirements clearly and help teams find practical paths forward.Identify opportunities to strengthen privacy operations, improve consistency, and build organizational and client confidence.What you’ll bring8+ years of progressive experience in data privacy operations, privacy program management, regulatory compliance, legal operations, data governance, risk management, or client-facing privacy advisory work.Experience owning or leading significant components of a privacy program, such as governance frameworks, controls, SOPs, assessment practices, consumer privacy rights processes, or data broker compliance.Strong working knowledge of U.S. state privacy laws and privacy requirements related to data brokers, consumer health data, advertising, and media.Experience conducting or overseeing privacy impact assessments, third-party reviews, supplier vetting, data-use assessments, or similar risk evaluations.The ability to translate legal, regulatory, technical, and contractual requirements into clear, executable business processes.Credibility with senior stakeholders, clients, privacy officers, Legal teams, and suppliers, along with the judgment to balance privacy obligations, business needs, client expectations, and operational feasibility.A bachelor’s degree in a relevant discipline—or equivalent professional experience.Particularly valuable: Experience in healthcare, pharmaceutical marketing, media, advertising agencies, data, or technology. CIPP/US, CIPM, or another relevant certification is preferred.The base salary for this position at the time of this posting may range from $90,000 to $180,000. Individual compensation varies based on job related factors, including business needs, experience, level of responsibility and qualifications.