Manager, Privacy Assessments & Risk

Ford

6h

About The Position

Build and lead a new team from the ground up. In this role, you will act as an advisor, collaborating with legal, IT, and business teams to embed privacy principles into our projects and systems. You'll have the opportunity to guide management on privacy risks and mitigation strategies, making you a central figure in our commitment to data privacy. This position offers a high degree of visibility and the chance to champion a culture of privacy across the entire organization. You will hire, guide, and develop a new team of privacy professionals, fostering their skills in privacy and risk analysis and establishing a clear direction for their work. You will direct the end-to-end Privacy Impact Assessment (PIA) process, working with project teams to identify and address privacy risks in new products, services, and internal systems. You will help build and operate our Third-Party Privacy Risk Management (TPRM) program, evaluating the privacy posture of our vendors and partners to ensure they meet our data protection standards. You will serve as a central point of contact for analyzing privacy risk, advising stakeholders in legal, cybersecurity, and business units on mitigation strategies and privacy-by-design principles. You will establish the operational frameworks and reporting mechanisms for the PIA and TPRM programs, tracking key metrics and communicating the status of privacy risks to leadership.

Requirements

• 10 years or equivalent combination of relevant education and experience.
• Direct responsibility for conducting Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), or third-party risk assessments.
• Experience using privacy management software, particularly in the context of assessments and vendor management.
• Experience directly managing or leading a team of privacy or risk analysts.
• Deep, hands-on experience with the OneTrust platform, especially with the PIA/DPIA and Third-Party Risk Management modules.
• Strong understanding of global privacy laws and frameworks, such as GDPR, CCPA/CPRA, and others.
• Proven experience in building and operationalizing new privacy or risk management programs from the ground up.

Nice To Haves

• OneTrust Fellow of Information Privacy (FIP) or other advanced OneTrust certifications.
• Professional certifications such as CIPP (Certified Information Privacy Professional), CIPM (Certified Information Privacy Manager), or CTPRP (Certified Third-Party Risk Professional).

Responsibilities

• Hire, guide, and develop a new team of privacy professionals, fostering their skills in privacy and risk analysis and establishing a clear direction for their work.
• Direct the end-to-end Privacy Impact Assessment (PIA) process, working with project teams to identify and address privacy risks in new products, services, and internal systems.
• Help build and operate our Third-Party Privacy Risk Management (TPRM) program, evaluating the privacy posture of our vendors and partners to ensure they meet our data protection standards.
• Serve as a central point of contact for analyzing privacy risk, advising stakeholders in legal, cybersecurity, and business units on mitigation strategies and privacy-by-design principles.
• Establish the operational frameworks and reporting mechanisms for the PIA and TPRM programs, tracking key metrics and communicating the status of privacy risks to leadership.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed
• Number of Employees: 5,001-10,000 employees