Privacy Lead

Northwestern Mutual•Milwaukee, WI

21h•$118,960 - $205,200

About The Position

The Privacy Lead serves as the company’s privacy expert, shaping enterprise privacy processes, data governance principles, and privacy-forward design. The role advises leaders and cross-functional partners on complex privacy matters, requirements, risk assessments, and enterprise initiatives, developing practical solutions with broad business and regulatory impact. The position represents privacy across the enterprise, consulting on privacy programs to support compliance with privacy laws and regulations and readiness for future requirements. It conducts risk assessments and oversight, supports privacy initiatives across the enterprise, affiliates, and field force, interprets data-classification questions, and serves as the privacy expert on corporate initiatives. The role also designs and delivers privacy training, develops solutions to address regulatory changes, creates and analyzes metrics and reports, and coordinates information-protection policies, procedures, and resource materials with Technology teams.

Requirements

Bachelor’s degree in business, information technology, or a related field.
At least 10 years of experience in Privacy, Records and Information Management, Data Governance, Compliance, Information Risk, or a related discipline.
Understanding of the financial services industry, including GLBA; healthcare, including HIPAA; SaaS functionalities; and technology concepts.
Effective interpersonal skills, including the ability to interact with, influence, and persuade others.
Strong organizational skills and the ability to set priorities and manage multiple, diverse assignments.
Ability to lead cross-departmental projects, translate complex requirements into actionable plans, and drive execution.
Ability to negotiate and influence across the company without direct authority.
Strong verbal and written communication, presentation, and platform-speaking skills.
Strong documentation skills, including the ability to summarize complex privacy matters in risk assessments, guidance, and stakeholder-ready materials.
Demonstrated ability to lead, coach, and mentor staff.
Understanding of privacy frameworks such as NIST, ISO, and SANS.
Ability to assess and prioritize tasks, conduct risk assessment and identification, consult with stakeholders, and partner and plan cross-functionally.

Nice To Haves

Privacy-related certification, such as Information Protection Professional (CIPP) or Certified Information Privacy Manager (CIPM).
Understanding of data structures and architecture, including domains, databases, tables, and BLOBS.
Understanding of Lines of Defense and experience with RSA Archer.
Experience with privacy technology suites such as OneTrust, ServiceNow, and data governance technology such as Atlan.

Responsibilities

Represent privacy across the enterprise and consult on privacy programs to support compliance with privacy laws and regulations and future readiness.
Conduct risk assessments and provide risk oversight to ensure compliance with privacy policies and regulations.
Collaborate across the enterprise, affiliates, and field force on privacy initiatives and issues.
Interpret data-classification questions, including how product and client data should be classified and understood.
Serve as the privacy expert on corporate initiatives.
Design and deliver privacy training for the enterprise, affiliates, and field force on governance agencies, laws, and data protections.
Develop solutions and process changes in response to a changing regulatory environment, influencing internal stakeholders as needed.
Develop and analyze metrics and reports, and support communication and awareness efforts for the Home Office and Field.
Work with the Information Risk Management Policies, Controls and Communications Team in Technology to manage and coordinate information-protection policies, procedures, and resource materials on internal and field-facing platforms.
Lead, coach, and mentor other staff members.