Data Privacy, Cybersecurity & AI Compliance Manager

Hippo Insurance•Austin, TX

6d•$120,000 - $179,500•Hybrid

About The Position

Hippo is seeking a Data Privacy, Cybersecurity & AI Compliance Manager to join their team. This role is hybrid and located in Austin, TX, Dallas, TX, or Morristown, NJ. The successful candidate will report to the Sr. Enterprise Compliance Director. Hippo, a technology-driven insurance company, is looking for a compliance professional who can bridge data privacy, cybersecurity, and AI governance. The ideal candidate will translate complex regulations into practical compliance programs, manage day-to-day privacy operations, handle security incidents, and prepare reports for board committees. Insurance industry experience is a plus. The role requires strong attention to detail, the ability to manage multiple regulatory threads, and collaboration skills with Legal, Security, Engineering, Marketing, and business units.

Requirements

5+ years of experience in data privacy, cybersecurity, and/or AI governance compliance within a regulated industry.
Hands-on operational experience (consumer rights requests, incident response, marketing compliance), not just policy work.
Bachelor's degree.
Demonstrated experience building or significantly maturing a privacy or compliance program, not solely running an established one.
Working knowledge of key privacy, marketing, and cybersecurity regulatory frameworks (CCPA/CPRA and other state privacy laws, TCPA, GLBA, NYDFS 23 NYCRR 500, NAIC Insurance Data Security Model Law).
Familiarity with the emerging AI regulatory landscape and how it applies to insurance use cases (underwriting, claims, pricing, customer service).
Experience supporting security incident response and breach notification analysis in partnership with information security and legal teams.
Strong written communication skills, including experience preparing reporting for senior management, board, or committee audiences.
Experienced working in close partnership with legal counsel and knows when to escalate for legal interpretation.
Strong program and project management skills; able to manage multiple regulatory workstreams simultaneously.
Technical aptitude and the ability to quickly learn new technologies and platforms (privacy management, consent management, and GRC tooling a plus).

Nice To Haves

One or more relevant certifications strongly preferred: CIPP/US, CIPM, or CIPT (IAPP privacy certifications), AIGP (IAPP Artificial Intelligence Governance Professional), CISSP, CISM, CRISC, or CDPSE.
Insurance industry experience strongly preferred (P&C a plus).
Insurance industry experience strongly preferred (P&C a plus).

Responsibilities

Design, build, and run Hippo's enterprise data privacy compliance program, maturing it into a documented, auditable program.
Own Hippo's privacy mailbox and consumer rights request process end to end.
Own compliance for marketing and outreach channels, including TCPA/telemarketing and SMS consent requirements, CAN-SPAM, and website tracking technologies.
Support compliance with insurance-specific cybersecurity regulations and general frameworks.
Partner with Information Security on the triage, investigation, containment, and resolution of cyber events, owning the compliance workstream.
Build and maintain Hippo's AI compliance framework, including use case intake, risk assessment, inventory, and monitoring for AI/ML systems.
Conduct privacy and data-protection reviews of vendors and third-party service providers.
Draft, maintain, and operationalize internal policies, standards, and procedures for data privacy, cybersecurity, and AI use.
Develop and deliver company-wide training and awareness on policies.
Serve as a day-to-day point of contact for regulatory inquiries, exams, and audits touching privacy, cyber, and AI.
Work closely with Legal, Information Security, Engineering, Marketing, and business units to embed compliance requirements into products, processes, and vendor relationships.