Director, Data Privacy & AI Governance

BDO USA, P.C. • Washington, DC

10h • $145,000 - $225,000

About The Position

BDO is seeking a Director for its Cyber Trust & Transformation practice. This senior advisor and hands-on engagement leader will oversee services spanning data privacy, data governance, AI governance, and digital safety, from strategy and risk assessments through regulatory readiness, program and policy development, operating-model design, technology implementation, remediation, co-sourced and outsourced program leadership, and managed services.

The Director will advise multinational and domestic clients on complex data, cyber regulatory, artificial intelligence, and cross-border data issues, translating legal and regulatory obligations into practical governance, scalable processes, controls, and technology solutions. The role is responsible for maintaining and expanding client relationships, developing proposals, managing complex engagements with limited oversight, delivering high-quality work on time and on budget, leading multidisciplinary teams, and developing BDO professionals and capabilities. The Director will collaborate across BDO's cyber, AI, data, risk, legal, and industry teams to develop integrated solutions and enhance services. Travel may be required up to 40% as needed.

Requirements

• Bachelor's degree required.
• At least 10 years of progressive experience in consulting, privacy, data governance, AI governance, digital safety, cyber regulation, legal, compliance, or technology.
• At least 7 years leading large, complex programs or engagements and managing multidisciplinary teams.
• At least 5 years advising on global and domestic privacy, data protection, cyber regulatory, data governance, or AI governance requirements.
• Hands-on experience designing, implementing, enhancing, or operating an enterprise privacy, data governance, or AI governance program, including direct responsibility for policies, assessments, data inventories, rights-request processes, consent or preference management, third-party risk, metrics, reporting, or related operational capabilities.
• Experience leading technology-enabled transformation or implementation of privacy, data and AI governance, GRC, data discovery, consent, model inventory, or related platforms.
• Working knowledge of privacy, data governance, AI governance, GRC, consent management, data discovery, model inventory, and related platforms, including OneTrust, BigID, Microsoft Purview, DataGrail, Collibra, Informatica, or comparable technologies.
• Proficiency in Microsoft Office Suite, including Microsoft 365, with strong PowerPoint and Excel skills, Visio, OneDrive, SharePoint, and project management tools.
• Ability to independently lead complex engagements, workstreams, and client relationships.
• Executive presence and credibility to serve as the primary advisor to senior client leaders and boards.
• Broad knowledge of privacy, data governance, AI governance, digital safety, cyber regulation, data ethics, records and retention, and technology-enabled compliance.
• Ability to interpret evolving laws, regulations, standards, and regulatory expectations and connect them to business strategy, risk, operations, controls, and technology.
• Strong commercial judgment and ability to shape opportunities, build trusted relationships, expand engagements, and develop sustainable managed services.
• Excellent verbal, written, facilitation, negotiation, and presentation skills.
• Strong analytical, research, and structured problem-solving skills, including the ability to synthesize legal, regulatory, technical, operational, and business considerations.
• Ability to lead through influence and collaborate across service lines, geographies, disciplines, partners, and client stakeholders.
• Strong organizational and financial management skills, including management of scope, quality, deadlines, budgets, staffing, and concurrent priorities.
• Ability to build high-performing teams, mature technical and consulting skills, delegate effectively, and contribute to the professional development of assigned personnel.
• Strategic mindset, technical curiosity, and ability to operate as a self-starter across diverse industries, regulatory environments, technologies, and subject areas while turning ambiguity into structured, practical client solutions.

Nice To Haves

• Master's degree, Juris Doctor, or MBA.
• Experience leading an AI transformation program that was put to use, with defined results such as adoption, financial return, or risk outcome, and accountability for the program.
• Experience with cross-border data transfers, data localization, multinational data flows, and international operating models.
• Demonstrated record of identifying, shaping, and winning significant consulting opportunities and expanding existing client relationships; Director candidates should show meaningful contributions to new business and account growth.
• One or more relevant privacy certifications, such as CIPP/US, CIPP/E, CIPM, CIPT, CDPSE, or equivalent.
• AI governance, responsible AI, data governance, cybersecurity, risk, technology platform, legal, or project management certifications.
• Certifications in privacy, data governance, AI governance, GRC, or data management platforms such as OneTrust, BigID, Microsoft Purview, DataGrail, Varonis, or comparable solutions.
• Knowledge of cloud, data architecture, databases, analytics, AI/ML lifecycle tooling, APIs, and integration concepts sufficient to lead technology-enabled engagements.

Responsibilities

• Serve as a trusted advisor to client boards, C-suite executives, and privacy, data, AI, legal, technology, and business leaders on data privacy, data governance, AI governance, digital safety, cyber regulation, and responsible data use.
• Lead client development and delivery of complex domestic and global engagements, including assessments, regulatory readiness, program and policy development, operating-model design, remediation, transformation, technology implementation, and managed services.
• Design, establish, operate, and enhance privacy, data governance, AI governance, and digital safety programs, including governance, policies, inventories, notices and consent, rights requests, impact assessments, third-party risk, incident processes, controls, metrics, reporting, and sustainable operating models.
• Advise on global privacy, data protection, cyber, and AI requirements, including cross-border transfers, localization, multinational data flows, high-risk processing, and regulatory inquiries; translate obligations into practical processes, controls, technical requirements, and implementation plans.
• Lead privacy and AI impact, maturity, gap, and governance assessments; direct data governance and digital safety initiatives; and embed relevant requirements into product, SDLC, model lifecycle, procurement, third-party risk, cloud, analytics, and change-management processes.
• Lead selection, design, configuration, integration, testing, deployment, adoption, and optimization of privacy, data governance, AI governance, GRC, consent, data discovery and mapping, rights-request, assessment automation, model inventory, and related platforms and enterprise workflows.
• Manage multiple complex engagements and client relationships with limited oversight, including scoping, contracting, planning, staffing, execution, quality review, financial management, executive reporting, risk and issue resolution, stakeholder communication, and transition to operations.
• Build and expand client relationships and practice capabilities through proposals and RFPs, cross-selling, thought leadership, reusable methodologies and offerings, collaboration across BDO teams, quality and risk management, and mentorship and development of professionals.
• Supervise workload and staffing across assigned engagements and review work products as needed.
• Build structured learning and development plans for team members covering relevant practice and consulting areas.
• Provide ongoing coaching, mentorship, performance feedback, and performance evaluations in accordance with Firm guidance.
• Develop future leaders who can advise clients, manage engagements, originate opportunities, and deliver high-quality work across the practice's service portfolio.
• Review and oversee engagement budgets and identify the appropriate mix and level of resources required.
• Model professional judgment, executive presence, collaboration, accountability, and a positive attitude toward client and Firm personnel.
• Travel up to 40%, as needed.
• Perform other duties as required.

Benefits

• BDO is an ESOP company; eligible participants can share in the firm's success through beneficial ownership.
• The ESOP is described as an addition to BDO's compensation and Total Rewards benefits offerings.

What This Job Offers

• Job Type: Full-time
• Career Level: Director