Director Data Privacy

Alaska Airlines • Seatac, WA

1d • $198,450 - $307,600 • Onsite

About The Position

The Director of Data Privacy leads the enterprise-wide data privacy program for Alaska Air Group, setting strategy and building capability that enables the responsible, trusted, and innovative use of personal data in support of business, product, and operational objectives. A successful leader in this role positions privacy as a core business capability, embedded early in decision-making, responsive to customer expectations, and aligned to how data is processed across the organization. As a people leader, the Director establishes clear strategy, operating standards, and culture for the Data Privacy team, partnering closely with leaders across all AAG organizations to ensure privacy considerations are integrated thoughtfully across the data lifecycle. They are comfortable advising business, operation, and IT product teams, engaging legal and regulatory counsel, and drafting Board-ready materials on privacy risk posture, sometimes all in the same week. They understand that a mature privacy program is not built on policies alone; it is built on trust, tooling, and a team that operates with clarity about what it owns.

Requirements

• 8 years of experience in data privacy, privacy program leadership, regulatory compliance, and privacy risk management.
• 5 years of leadership experience, with at least 2 of those years directly leading people.
• Demonstrated experience operating in international privacy environments, including GDPR, UK GDPR, and cross‑border data considerations.
• Hands‑on experience partnering with Technology and Security teams, including privacy‑by‑design, incident response, and integration with security practices.
• Demonstrated project management experience, with the ability to lead complex, cross‑functional initiatives from concept through execution.
• Experience selecting, implementing, or operating privacy technology platforms (e.g., consent management, DSR tooling, privacy case management).
• Strong understanding of privacy considerations related to AI, automated decision‑making, and advanced data analytics.
• Demonstrated experience leading privacy incident response, including breach notification analysis, regulatory reporting timelines, data subject notification, and third‑party handler accountability.
• Certified Information Privacy Manager (CIPM).
• Bachelor’s degree, or an additional two years of relevant training/experience in lieu of this degree.
• High school diploma or equivalent is required.
• Minimum age of 18.
• Must be authorized to work in the U.S.

Nice To Haves

• CIPP (Certified Information Privacy Professional) or CIPT (Certified Information Privacy Technologist) in addition to CIPM.
• Experience in a regulated industry with consumer-facing data practices at scale (e.g. aviation, hospitality, financial services, or comparable).
• Familiarity with privacy implications of AI and automated decision-making systems, including experience reviewing GenAI acceptable use frameworks or model governance documents.
• Working knowledge of information security principles and cybersecurity incident response processes sufficient to serve as an effective partner to a security operations function.

Responsibilities

• Set and execute the enterprise‑wide data privacy strategy for Alaska Air Group, aligning privacy practices with business priorities, customer expectations, and international expansion.
• Position privacy as a business‑enabling function, supporting new products, digital experiences, data‑driven decision‑making, and commercial initiatives while managing risk thoughtfully.
• Partner with leaders across Product, Technology, Commercial, Marketing, HR, and Legal to embed privacy into design, development, and operational processes.
• Lead enterprise privacy readiness for international and cross‑border operations, including compliance with General Data Protection Regulation (GDPR), UK GDPR, and evolving global privacy regulations.
• Define and oversee privacy approaches to cross‑border data transfers, working closely with Legal and Security on appropriate transfer mechanisms and safeguards.
• Provide privacy leadership and input into AI‑enabled and automated decision‑making systems, including guidance on GenAI acceptable use, agentic systems, transparency, fairness, and data subject rights.
• Oversee and continuously improve the privacy technology stack, including consent management platforms, data subject rights request (DSR) automation, privacy case management, and related tooling to ensure scalable, operational execution.
• Use customer feedback, preferences, and experience insights to inform data‑use guidelines and influence how personal data is collected, used, and protected across emerging programs.
• Lead and coordinate responses to privacy incidents and potential data breaches, partnering with Security, Legal, and Communications and representing privacy perspectives at executive levels when required.
• Prepare executive‑level materials and briefings, including content that supports enterprise leadership and Board‑level discussions through senior leadership.
• Monitor industry trends, regulatory developments, and competitive practices, translating external change into clear internal guidance and priorities.

Benefits

• Free stand-by travel privileges on Alaska Airlines, Hawaiian Airlines & Horizon Air with high priority status
• Select number of confirmed travel credits provided annually
• Comprehensive well-being programs including medical, dental and vision benefits
• Generous 401k match program
• Annual bonus plans
• Generous holiday and paid time off

What This Job Offers

• Job Type: Full-time
• Career Level: Director