AVP, Legal - Privacy, Cybersecurity & AI

Description

This position is located at our Columbus home office and will have weekly in office expectations.

Your Role

We are seeking an experienced and pragmatic legal leader to serve as AVP, Legal - Privacy, Cybersecurity & AI. This role will lead our global legal strategy across privacy, cybersecurity, and AI, helping the company responsibly use data and emerging technology to accelerate growth, deepen customer relationships, and create exceptional experiences across our stores and digital channels.

As a global omnichannel retailer, data and technology are integral to how we understand and serve our customers, operate our business, and innovate. This leader will work at the intersection of law, technology, customer experience, and commercial strategy, translating a rapidly evolving regulatory landscape into practical strategies that enable the business to move with speed and confidence.

The AVP will lead a global team and serve as a trusted advisor to senior leaders across Legal, Digital, Technology, Cybersecurity, and other business functions.

Your Impact

• Set and execute the company’s global legal strategy for privacy,cybersecurity, and AI aligning legal risk management with the company’s growth and innovation priorities.

• Advise the business on emerging legal, regulatory, and technology risks and translate those developments into clear business implications and strategic choices.

• Lead and develop a global team responsible for privacy, cybersecurity, and AI legal matters.

• Provide practical, risk-based legal advice on the collection, use, sharing, retention, and protection of customer, employee, and business data.

• Advise on the responsible use of AI and other data centric technologies, helping business teams innovate responsibly.

• Serve as a key legal partner to Cybersecurity on the cybersecurity program, as well as incident response, including breach assessment, regulatory notification, privilege, and related regulatory matters.

• Oversee and continuously improve scalable privacy processes, including privacy impact assessments, data subject rights, consent and preference management, data protection agreements, cookie management, tracking technologies, cross-border data transfers, and privacy notices.

• Monitor evolving U.S. and international laws, regulatory developments, and litigation trends, and help translate new requirements into practical business actions.

• Partner with Legal and business leadership to identify and prioritize significant privacy, cybersecurity, and AI risks and develop practical approaches to address them.

• Manage outside counsel and other external resources effectively and efficiently.