Director, Data Privacy & AI Governance

Job Summary

BDO is seeking a Director to join BDO's Cyber Trust & Transformation practice as a senior advisor and hands‑on engagement leader across data privacy, data governance, AI governance, and digital safety. The role will lead and execute services ranging from strategy, risk assessments, and regulatory readiness through program and policy development, operating‑model design, technology implementation, remediation, co‑sourced and outsourced program leadership, and managed services. This leader will advise multinational and domestic clients on complex data, cyber regulatory, artificial intelligence, and cross‑border data issues while translating legal and regulatory obligations into practical governance, scalable processes, controls, and technology solutions. The Director is responsible for maintaining and expanding client relationships, creating proposals for new client opportunities, managing complex workstreams with limited oversight, delivering high-quality work, leading multidisciplinary teams, and ensuring engagements are delivered on time and on budget. The role will also develop BDO professionals and capabilities in these domains and collaborate across BDO's broader cyber, AI, data, risk, legal, and industry teams to drive integrated solutions and continued enhancement of BDO's services.

Job Duties

• Serves as a trusted advisor to client boards, C‑suite executives, privacy, data, AI, legal, technology, and business leaders on data privacy, data governance, AI governance, digital safety, cyber regulation, and responsible data use
• Leads client development and hands‑on delivery of complex domestic and global engagements, including assessments, regulatory readiness, program and policy development, operating‑model design, remediation, transformation, technology implementation, and managed services
• Designs, establishes, operates, and enhances privacy, data governance, AI governance, and digital safety programs, including governance, policies, inventories, notices and consent, rights requests, impact assessments, third‑party risk, incident processes, controls, metrics, reporting, and sustainable operating models
• Advises on global privacy, data protection, cyber, and AI requirements—including cross‑border transfers, localization, multinational data flows, high‑risk processing, and regulatory inquiries—and translates obligations into practical processes, controls, technical requirements, and implementation plans
• Leads privacy and AI impact, maturity, gap, and governance assessments; directs data governance and digital safety initiatives; and embeds privacy, responsible AI, and data governance requirements into product, SDLC, model lifecycle, procurement, third‑party risk, cloud, analytics, and change‑management processes
• Leads the selection, design, configuration, integration, testing, deployment, adoption, and optimization of privacy, data governance, AI governance, GRC, consent, data discovery and mapping, rights‑request, assessment automation, model inventory, and related platforms and enterprise workflows
• Leads all aspects of multiple complex engagements and client relationships with limited oversight, including scoping, contracting, planning, staffing, execution, quality review, financial management, executive reporting, risk and issue resolution, stakeholder communication, and transition to operations
• Builds and expands client relationships and practice capabilities through proposals and RFPs, cross‑selling, thought leadership, reusable methodologies and offerings, collaboration across BDO teams, quality and risk management, and mentorship and development of high‑performing professionals
• Travel up to 40%, as needed
• Other duties as required

Supervisory Responsibilities

• Performs the following functions for team members ranging from Senior Managers through Associates:
• Supervises workload and staffing across assigned engagements and reviews work product, as needed
• Builds structured learning and development plans covering privacy, data governance, AI governance, digital safety, technology platforms, regulatory requirements, consulting skills, and practice tools and processes
• Provides ongoing coaching, mentorship, and timely performance feedback, and completes performance evaluations in accordance with Firm guidance
• Develops future leaders who can advise clients, manage engagements, originate opportunities, and deliver high‑quality work across the practice's service portfolio
• Reviews and oversees engagement budgets and identify the appropriate mix and level of resources required to execute effectively
• Models professional judgment, executive presence, collaboration, accountability, and a positive attitude toward client and Firm personnel

Qualifications, Knowledge, Skills, and Abilities

Education

• Bachelor's degree, required
• Master's degree, Juris Doctor, or MBA, preferred

Experience

• Ten (10) or more years of progressive experience in consulting, privacy, data governance, AI governance, digital safety, cyber regulation, legal, compliance, or technology, required
• Seven (7) or more years leading large, complex programs or engagements and managing multidisciplinary teams, required
• Five (5) or more years advising on global and domestic privacy, data protection, cyber regulatory, data governance, or AI governance requirements, required
• Demonstrated hands‑on experience designing, implementing, enhancing, or operating an enterprise privacy, data governance, or AI governance program, including direct responsibility for policies, assessments, data inventories, rights‑request processes, consent or preference management, third‑party risk, metrics, reporting, or related operational capabilities, required
• Experience leading technology‑enabled transformation or implementation of privacy, data & AI governance, GRC, data discovery, consent, model inventory, or related platforms, required
• Experience with any AI transformation program you led and put to use, with results you can define to include adoption, financial return, or risk outcome achieved and your accountability for the program, preferred
• Experience with cross‑border data transfers, data localization, multinational data flows, and international operating models, preferred
• Demonstrated record of identifying, shaping, and winning significant consulting or opportunities and expanding existing client relationships. Director candidates should show meaningful contributions to growth of new business and account growth, preferred

License(s)/Certification(s)

• One (1) or more relevant privacy certifications, such as CIPP/US, CIPP/E, CIPM, CIPT, CDPSE, or equivalent, preferred
• AI governance, responsible AI, data governance, cybersecurity, risk, technology platform, legal, or project management certifications, preferred
• Certifications in one or more privacy, data governance, AI governance, GRC, or data management platforms, such as OneTrust, BigID, Microsoft Purview, DataGrail, Varonis, or comparable solutions, preferred

Software

• Working knowledge of privacy, data governance, AI governance, GRC, consent management, data discovery, model inventory, and related platforms, including OneTrust, BigID, Microsoft Purview, DataGrail, Collibra, Informatica, or comparable technologies, required
• Proficient in Microsoft Office Suite, including Microsoft 365, with Strong PowerPoint and Excel skills, Visio, OneDrive, SharePoint, and project management tools, required
• Knowledge of cloud, data architecture, databases, analytics, AI/ML lifecycle tooling, APIs, and integration concepts sufficient to lead technology‑enabled engagements, preferred

Language(s)

• N/A

Other Knowledge, Skills, & Abilities

• Director candidates should demonstrate the ability to independently lead complex engagements, workstreams, and client relationships
• Executive presence and credibility to serve as the primary advisor to senior client leaders and boards
• Broad knowledge of privacy, data governance, AI governance, digital safety, cyber regulation, data ethics, records and retention, and technology‑enabled compliance
• Ability to interpret evolving laws, regulations, standards, and regulatory expectations and connect them to business strategy, risk, operations, controls, and technology
• Strong commercial judgment and ability to shape opportunities, build trusted relationships, expand engagements, and develop sustainable managed services
• Excellent verbal, written, facilitation, negotiation, and presentation skills
• Strong analytical, research, and structured problem‑solving skills, with the ability to synthesize legal, regulatory, technical, operational, and business considerations
• Ability to lead through influence and collaborate effectively across service lines, geographies, disciplines, partners, and client stakeholders
• Strong organizational and financial management skills, including the ability to manage scope, quality, deadlines, budgets, staffing, and multiple concurrent priorities
• Ability to build high‑performing teams, mature technical and consulting skills, delegate effectively, and contribute to the professional development of assigned personnel
• Strategic mindset, technical curiosity, and the ability to operate as a self‑starter across diverse industries, regulatory environments, technologies, and subject areas while converting ambiguity into structured, practical client solutions

Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography.

National Range: $145,000 - $225,000

Maryland Range: $145,000 - $225,000

NYC/Long Island/Westchester Range: $145,000 - $225,000