Director, Data Privacy & AI Governance

BDO USA•Washington, WA

About The Position

BDO is seeking a Director for its Cyber Trust & Transformation practice to serve as a senior advisor and hands-on engagement leader across data privacy, data governance, AI governance, and digital safety. The Director leads services spanning strategy, risk assessments, regulatory readiness, program and policy development, operating-model design, technology implementation, remediation, co-sourced and outsourced program leadership, and managed services. The role advises multinational and domestic clients on complex data, cyber regulatory, artificial intelligence, and cross-border data issues, translating legal and regulatory obligations into practical governance, scalable processes, controls, and technology solutions. The Director maintains and expands client relationships, develops proposals for new opportunities, manages complex workstreams with limited oversight, delivers high-quality work, leads multidisciplinary teams, and ensures engagements are completed on time and within budget. The role also develops BDO professionals and practice capabilities and collaborates with BDO’s cyber, AI, data, risk, legal, and industry teams to deliver integrated solutions and enhance services. The position includes travel up to 40%, as needed, and supervision of team members ranging from Senior Managers through Associates.

Requirements

Bachelor’s degree required.
Ten or more years of progressive experience in consulting, privacy, data governance, AI governance, digital safety, cyber regulation, legal, compliance, or technology required.
Seven or more years leading large, complex programs or engagements and managing multidisciplinary teams required.
Five or more years advising on global and domestic privacy, data protection, cyber regulatory, data governance, or AI governance requirements required.
Hands-on experience designing, implementing, enhancing, or operating an enterprise privacy, data governance, or AI governance program, including responsibility for policies, assessments, data inventories, rights-request processes, consent or preference management, third-party risk, metrics, reporting, or related operational capabilities required.
Experience leading technology-enabled transformation or implementation of privacy, data and AI governance, GRC, data discovery, consent, model inventory, or related platforms required.
Working knowledge of privacy, data governance, AI governance, GRC, consent management, data discovery, model inventory, and related platforms, including OneTrust, BigID, Microsoft Purview, DataGrail, Collibra, Informatica, or comparable technologies required.
Proficiency in Microsoft Office Suite, including Microsoft 365, with strong PowerPoint and Excel skills, Visio, OneDrive, SharePoint, and project management tools required.
Ability to independently lead complex engagements, workstreams, and client relationships.
Executive presence and credibility to serve as primary advisor to senior client leaders and boards.
Broad knowledge of privacy, data governance, AI governance, digital safety, cyber regulation, data ethics, records and retention, and technology-enabled compliance.
Ability to interpret evolving laws, regulations, standards, and regulatory expectations and connect them to business strategy, risk, operations, controls, and technology.
Strong commercial judgment and ability to shape opportunities, build trusted relationships, expand engagements, and develop sustainable managed services.
Excellent verbal, written, facilitation, negotiation, and presentation skills.
Strong analytical, research, and structured problem-solving skills, including the ability to synthesize legal, regulatory, technical, operational, and business considerations.
Ability to lead through influence and collaborate across service lines, geographies, disciplines, partners, and client stakeholders.
Strong organizational and financial management skills, including management of scope, quality, deadlines, budgets, staffing, and concurrent priorities.
Ability to build high-performing teams, develop technical and consulting skills, delegate effectively, and contribute to personnel development.
Strategic mindset, technical curiosity, and ability to work as a self-starter across diverse industries, regulatory environments, technologies, and subject areas while turning ambiguity into practical client solutions.

Nice To Haves

Master’s degree, Juris Doctor, or MBA preferred.
Experience leading an AI transformation program through implementation, with defined results such as adoption, financial return, or risk outcome and clear accountability, preferred.
Experience with cross-border data transfers, data localization, multinational data flows, and international operating models preferred.
Demonstrated record of identifying, shaping, and winning significant consulting opportunities and expanding client relationships; meaningful contributions to new-business and account growth preferred for Director candidates.
One or more relevant privacy certifications, such as CIPP/US, CIPP/E, CIPM, CIPT, CDPSE, or equivalent, preferred.
AI governance, responsible AI, data governance, cybersecurity, risk, technology platform, legal, or project management certifications preferred.
Certifications in one or more privacy, data governance, AI governance, GRC, or data management platforms, such as OneTrust, BigID, Microsoft Purview, DataGrail, Varonis, or comparable solutions, preferred.
Knowledge of cloud, data architecture, databases, analytics, AI/ML lifecycle tooling, APIs, and integration concepts sufficient to lead technology-enabled engagements preferred.

Responsibilities

Advise client boards, C-suite executives, and privacy, data, AI, legal, technology, and business leaders on data privacy, data governance, AI governance, digital safety, cyber regulation, and responsible data use.
Lead client development and hands-on delivery of complex domestic and global engagements, including assessments, regulatory readiness, program and policy development, operating-model design, remediation, transformation, technology implementation, and managed services.
Design, establish, operate, and enhance privacy, data governance, AI governance, and digital safety programs, including governance, policies, inventories, notices and consent, rights requests, impact assessments, third-party risk, incident processes, controls, metrics, reporting, and operating models.
Advise on global privacy, data protection, cyber, and AI requirements, including cross-border transfers, localization, multinational data flows, high-risk processing, and regulatory inquiries; translate obligations into practical processes, controls, technical requirements, and implementation plans.
Lead privacy and AI impact, maturity, gap, and governance assessments; direct data governance and digital safety initiatives; and embed privacy, responsible AI, and data governance requirements into product, SDLC, model lifecycle, procurement, third-party risk, cloud, analytics, and change-management processes.
Lead selection, design, configuration, integration, testing, deployment, adoption, and optimization of privacy, data governance, AI governance, GRC, consent, data discovery and mapping, rights-request, assessment automation, model inventory, and related platforms and enterprise workflows.
Lead multiple complex engagements and client relationships with limited oversight, including scoping, contracting, planning, staffing, execution, quality review, financial management, executive reporting, risk and issue resolution, stakeholder communication, and transition to operations.
Build and expand client relationships and practice capabilities through proposals and RFPs, cross-selling, thought leadership, reusable methodologies and offerings, collaboration across BDO teams, quality and risk management, and mentorship and development of professionals.
Supervise workload and staffing across assigned engagements and review work products as needed.
Build structured learning and development plans for team members covering relevant subject matter, technology platforms, regulatory requirements, consulting skills, and practice tools and processes.
Provide ongoing coaching, mentorship, and performance feedback; complete performance evaluations in accordance with Firm guidance; and develop future leaders.
Review and oversee engagement budgets and determine the appropriate mix and level of resources for effective execution.
Model professional judgment, executive presence, collaboration, accountability, and a positive attitude toward client and Firm personnel.
Travel up to 40%, as needed.
Perform other duties as required.