As a Director of Privacy Operations and Governance within Nordstrom's Governance, Risk, and Compliance (GRC) team, you will lead the design, implementation, and execution of Nordstrom's Privacy and Governance programs. You will ensure compliance with U.S. privacy regulations, manage cybersecurity governance risks, and embed best practices across the enterprise to enhance Nordstrom's security posture and protect customer data. In this role, you will act as the operational engine behind privacy and governance initiatives, partnering closely with Legal, HR, Marketing, Finance, and other business units. You will work across departments and functional lines on a variety of programs that range in scope, risk, and complexity. Are you a strategic leader who is passionate about building robust governance and privacy programs? Do you think about ways to operationalize complex privacy regulations into business-friendly practices? Do you want to shape governance culture and influence executive decision-making on customer trust and data stewardship? Join our team and be part of a company that is on the cutting edge of retail technology geared at getting consumers the products they love in a safe and secure environment. A day in life... Lead the design, implementation, and management of enterprise-wide privacy and governance operations Build and scale privacy operations processes including Privacy Impact Assessments (PIA), data subject rights workflows, and privacy-by-design reviews Develop governance frameworks defining roles, responsibilities, and accountability structures for data privacy risk Own lifecycle management of privacy and cybersecurity policies: creation, review, approval, and updates Ensure compliance with U.S. privacy laws (CCPA/CPRA, Colorado CPA, Virginia VCDPA, Connecticut, Utah, and emerging state laws) Establish a comprehensive governance model to measure and track the maturation of the overall cybersecurity program on a regular basis Create governance reporting mechanisms and executive dashboards for program maturity and risk posture Lead incident response for privacy breaches, including investigation, documentation, and regulatory reporting Define KPIs and KRIs for privacy and cybersecurity governance programs with regular leadership reporting Conduct maturity assessments and gap analyses to identify improvement opportunities Develop and deploy privacy and governance training programs with role-based curricula Oversee vendor privacy risk assessments and ensure appropriate contractual terms (DPAs, BAAs) Implement data classification schemes, ownership models, and lifecycle management processes Serve as operational privacy and governance expert across departments, partnering with Legal and Cybersecurity to ensure program alignment Develop and manage a roadmap informed by governance insights to prioritize initiatives and allocate resources effectively Build relationships with business leaders as a trusted advisor on privacy and governance matters