Director, Data Privacy

Fitch Group•New York, NY

6d•$160,000 - $180,000•Hybrid

About The Position

Fitch Group is seeking a Director, Data Privacy to provide senior-level privacy support for customer-facing digital products and services, acquired businesses, digital initiatives, and online tracking compliance across multiple jurisdictions. The role sits within the Fitch Group Data Privacy Office, which develops, implements, and maintains data privacy policies, procedures, and initiatives across the organization and its subsidiaries, ensuring compliance with global data protection regulations and promoting privacy awareness. The Director will advise business, product, marketing, technology, Compliance, Risk, and Legal stakeholders, translating privacy requirements into practical, risk-based controls that support business objectives and operational feasibility. The role reports to the Fitch Group Data Privacy Manager, advises the Chief Information Security Officer, monitors regulatory developments, and supports senior stakeholders. It also manages privacy assessments, vendor and contract reviews, data processing agreements, cross-border transfer analyses, transfer impact assessments, and website and online tracking controls. The position includes privacy-by-design support for digital products and acquired businesses, collaboration with U.S.-based colleagues across time zones, and guidance to junior team members. Fitch offers a hybrid work environment requiring two to three days per week in the office, depending on line of business and location. The position’s stated New York expected base salary range is $160,000 to $180,000 per year; actual salary may vary based on job-related factors.

Requirements

Strong understanding of global privacy laws and regulatory expectations, including EU/UK GDPR, U.S. state privacy laws, and other frameworks relevant to customer-facing digital products, services, and cross-border business activities.
Ability to work independently, exercise sound judgment, and solve complex and ambiguous privacy problems with limited direction.
Ability to translate legal and regulatory requirements into practical, risk-based privacy implementation steps and controls for business and technology teams.
Experience advising on privacy compliance for online products and services, website tracking technologies, consent management, marketing activities, customer-facing digital journeys, and privacy-by-design processes.
Experience with cross-border data transfer compliance, transfer impact assessments, and privacy requirements in international regions, including APAC markets and China-related considerations.
Experience conducting risk assessments involving AI processing of personal data and sensitive personal data.
Experience working with and leading global teams.
Legal, compliance, or privacy program management background with significant data privacy experience; Director-level judgment, stakeholder management, and implementation experience are expected.
Strong written and oral communication skills in English and the ability to work effectively with senior stakeholders, business and technology teams, legal colleagues, and cross-functional partners.

Nice To Haves

Additional language skills.
Medium-level technological expertise in data tracing and new AI technologies.
Experience working in a legal department.
Privacy certifications, or currently studying for certifications from accredited organizations such as IAPP CIPP/E or CIPP/M.

Responsibilities

Lead and provide senior-level privacy guidance for customer-facing digital products and services, acquired entities, online products and services, and other digital initiatives.
Provide practical, risk-based privacy advice, research, and recommendations to business, product, marketing, technology, Compliance, Risk, and Legal stakeholders.
Monitor privacy compliance trends, emerging regulatory requirements, and implementation impacts across global digital business activities; advise the Chief Information Security Officer and support senior stakeholders.
Manage privacy assessments and compliance activities, including vendor and supplier privacy reviews, privacy-related contract reviews, data processing agreements, cross-border data transfer analyses, transfer impact assessments, and regional compliance considerations.
Own and support website and online tracking compliance, including cookie and similar technology governance, consent collection for account creation and contact forms, coordination with shared technology platforms, and maintenance of related privacy controls.
Establish, maintain, and improve privacy programs for customer-facing digital products and services and acquired businesses.
Provide privacy-by-design support for product, marketing, customer engagement, and digital transformation initiatives.
Partner with U.S.-based stakeholders and team members across time zones, solve complex privacy matters independently, and guide junior team members on implementation questions.
Translate privacy requirements into practical controls, workflows, and implementation steps while balancing business objectives, operational feasibility, customer experience, and risk management.
Build trusted relationships and collaborate with Legal, Compliance, Risk, Technology, Product, Marketing, and business stakeholders.