Director, Data Privacy Operations & Governance

CMI Media Group • Parsippany, NJ

2d • $90,000 - $180,000

About The Position

The Director, Data Privacy Operations & Governance is a senior privacy leader responsible for building and improving the governance, processes, and controls that help an agency work with data responsibly and consistently. This cross-functional role partners with Legal, Data Security, Supplier Management, Contracting, Client Leadership, Finance, Technology, and business teams to translate approved legal and regulatory guidance into practical operating standards.

The role also represents the agency in privacy discussions with clients, client legal and privacy teams, data and media suppliers, and other external partners. The director will strengthen privacy operations, make requirements executable in day-to-day work, and build organizational and client confidence.

Requirements

• 8+ years of progressive experience in data privacy operations, privacy program management, regulatory compliance, legal operations, data governance, risk management, or client-facing privacy advisory work.
• Experience owning or leading significant components of a privacy program, such as governance frameworks, controls, SOPs, assessment practices, consumer privacy rights processes, or data broker compliance.
• Strong working knowledge of U.S. state privacy laws and privacy requirements related to data brokers, consumer health data, advertising, and media.
• Experience conducting or overseeing privacy impact assessments, third-party reviews, supplier vetting, data-use assessments, or similar risk evaluations.
• Ability to translate legal, regulatory, technical, and contractual requirements into clear, executable business processes.
• Credibility with senior stakeholders, clients, privacy officers, Legal teams, and suppliers, and judgment to balance privacy obligations, business needs, client expectations, and operational feasibility.
• A bachelor’s degree in a relevant discipline or equivalent professional experience.

Nice To Haves

• Experience in healthcare, pharmaceutical marketing, media, advertising agencies, data, or technology.
• CIPP/US, CIPM, or another relevant certification.

Responsibilities

• Establish and improve the privacy operating model, including governance, decision rights, accountability, controls, documentation, and escalation pathways.
• Develop practical privacy policies, SOPs, playbooks, decision frameworks, and training.
• Partner with Legal to operationalize approved guidance on evolving U.S. federal and state requirements, including data broker obligations, consumer health data, and advertising and media privacy.
• Oversee applicable data broker registrations and reporting, as well as consumer privacy rights processes for access, deletion, correction, and opt-outs, including Do Not Sell or Share requests.
• Lead or coordinate privacy impact, data-use, and third-party risk assessments involving suppliers, media partners, technologies, AI solutions, client services, and business processes, and recommend controls proportionate to the risks.
• Work with Legal, Contracting, and Supplier Management to support privacy-related contract reviews and turn approved obligations into workable processes and controls.
• Represent the agency’s privacy practices in client, supplier, and partner discussions; communicate requirements clearly and help teams find practical paths forward.
• Identify opportunities to strengthen privacy operations, improve consistency, and build organizational and client confidence.

What This Job Offers

• Job Type: Full-time
• Career Level: Director