Director, Data Privacy Operations & Governance

CMI Media Group • Philadelphia, PA

1d

About The Position

CMI Media Group is seeking a senior privacy leader to build and improve the governance, processes, and controls that help the agency work with data responsibly and consistently. This cross-functional role partners with Legal, Data Security, Supplier Management, Contracting, Client Leadership, Finance, Technology, and business teams to translate approved legal and regulatory guidance into practical operating standards. The Director also serves as a senior privacy representative in discussions with clients, client legal and privacy teams, data and media suppliers, and other external partners.

The role establishes and improves the privacy operating model, develops usable policies and procedures, operationalizes approved legal guidance, oversees relevant compliance processes, and coordinates privacy and third-party risk assessments. It also helps turn approved contractual privacy obligations into workable controls and identifies ways to improve privacy operations and strengthen organizational and client confidence.

Requirements

• 8+ years of progressive experience in data privacy operations, privacy program management, regulatory compliance, legal operations, data governance, risk management, or client-facing privacy advisory work.
• Experience owning or leading significant components of a privacy program, such as governance frameworks, controls, SOPs, assessment practices, consumer privacy rights processes, or data broker compliance.
• Strong working knowledge of U.S. state privacy laws and privacy requirements related to data brokers, consumer health data, advertising, and media.
• Experience conducting or overseeing privacy impact assessments, third-party reviews, supplier vetting, data-use assessments, or similar risk evaluations.
• Ability to translate legal, regulatory, technical, and contractual requirements into clear, executable business processes.
• Credibility with senior stakeholders, clients, privacy officers, Legal teams, and suppliers, and judgment to balance privacy obligations, business needs, client expectations, and operational feasibility.
• A bachelor’s degree in a relevant discipline or equivalent professional experience.

Nice To Haves

• Experience in healthcare, pharmaceutical marketing, media, advertising agencies, data, or technology.
• CIPP/US, CIPM, or another relevant certification.

Responsibilities

• Establish and improve the privacy operating model, including governance, decision rights, accountability, controls, documentation, and escalation pathways.
• Develop practical privacy policies, SOPs, playbooks, decision frameworks, and training.
• Partner with Legal to operationalize approved guidance on evolving U.S. federal and state requirements, including data broker obligations, consumer health data, and advertising and media privacy.
• Oversee applicable data broker registrations and reporting, as well as consumer privacy rights processes for access, deletion, correction, and opt-outs, including Do Not Sell or Share requests.
• Lead or coordinate privacy impact, data-use, and third-party risk assessments involving suppliers, media partners, technologies, AI solutions, client services, and business processes; recommend controls proportionate to the risks.
• Work with Legal, Contracting, and Supplier Management to support privacy-related contract reviews and turn approved obligations into workable processes and controls.
• Represent the agency’s privacy practices in client, supplier, and partner discussions; communicate requirements clearly and help teams find practical paths forward.
• Identify opportunities to strengthen privacy operations, improve consistency, and build organizational and client confidence.

What This Job Offers

• Job Type: Full-time
• Career Level: Director