About the position
The Manager of AI Governance is responsible for leading the execution of TJX's global AI, privacy, and data protection compliance functions. This newly created position sits in our Data Privacy and Protection function and is responsible for identifying and mitigating risks associated with AI, privacy, information management and other regulatory requirements to ensure the company's operations are secure and compliant. This position supports efforts around legal and compliance issues on a global scale with a focus on global AI and privacy laws such as the EU AI Act, Colorado AI Act, GDPR, and CCPA. The Manager of AI Governance leads the effort to monitor, research, and communicate AI, privacy, and information management regulatory standards and procedures, both internally and externally, to ensure the global organization remains aligned with government and sector regulations and handles risk accordingly. This is a hybrid position requiring 2 days a week on site in our Marlborough, MA offices.
Responsibilities
- Leads efforts to align with all relevant global AI, privacy and data protection laws in assigned jurisdictions while supporting all TJX business operations across the globe.
- Leads the due-diligence and risk management efforts regarding the use of AI throughout the organization.
- Stays abreast of global AI and privacy developments and best practices and adjusts strategies and program designs accordingly.
- Partners with TJX's various global IT functions to evaluate and help implement privacy by design principles in all new technologies including those AI systems processing personal data.
- Responsible for the design structure and execution of various AI and privacy related documentation such as Records of Processing Activities, Impact Assessments, and Legitimate Interest Assessments.
- Leads all work related to regulatory response and negotiation with European Works Councils on all AI and data protection related topics.
- Keeps abreast of developments in emerging technologies like Artificial Intelligence, Biometrics, and Facial Recognition and advises on the impact and risks associated with them.
- Maintains focus on continuous process improvement regarding all aspects of AI, privacy, and data protection programs including developing the breadth of AI and privacy experience and talent within the function.
Requirements
- 5-7+ years of privacy, compliance, or risk management experience
- Bachelor's Degree required, law degree a plus
- Certification related to AI or Privacy and Data Protection (e.g., International Association of Privacy Professionals certifications) a plus
- Experience handling AI, privacy, and/or data protection requirements for a diverse array of data, ideally with a broad global reach requiring proven International experience
- Familiarity with risk management frameworks or standards such as NIST AI RMF, ISO, etc. a plus
- Familiarity with AI concepts such as machine learning, Generative AI, and other AI capabilities preferred
- Excellent judgement, leadership, interpersonal, communication, organization, prioritization, technical, process-improvement, influencing, management and development skills
- Must be proficient in Microsoft Office and other Microsoft platform technologies (e.g., SharePoint)
- Significant experience working with global IT functions like Data Security and Architecture
- Experience drafting internal policies and procedures
- Experience instilling a culture of continuous improvement
Benefits
- Associate discount
- 401(k) match
- medical/dental/vision
- HSA
- health care FSA
- life insurance
- short/long-term disability
- paid holidays/vacation/sick/bereavement/parental leave
- EAP
- incentive programs for management
- auto/home insurance discounts
- tuition reimbursement
- scholarship program
- adoption/surrogacy assistance
- smoking cessation
- child care/cell phone discounts
- pet/legal insurance
- credit union
- referral bonuses
