Senior Director, Privacy & Data Governance Operations

National Basketball Association (NBA)•New York, NY

4d•$200,000 - $230,000•Hybrid

About The Position

The Senior Director, Privacy & Data Governance Operations will support the execution and continued advancement of the NBA’s global privacy and data governance program, reporting to the Chief Privacy & Data Governance Officer. This role will serve as a subject matter expert and advisor to management and stakeholders across the NBA, WNBA, NBA G League, Basketball Africa League, international regions, and corporate functions. The role will partner closely with Legal, Risk, Cybersecurity, Technology, Direct to Consumer, Data Strategy and Analytics, and other internal teams to incorporate privacy and responsible data practices into business operations. The role will work independently and cross-functionally to manage PDG operations, coordinate cross-functional initiatives, assess complex privacy and data governance requirements, identify and evaluate risks, and provide practical, business-aligned recommendations. The position will help enable the NBA’s responsible use of data and emerging technologies by providing expertise and guidance on privacy, data governance, artificial intelligence, and related regulatory requirements. The role requires experienced program leadership, deep subject matter expertise, strong business judgment, and the ability to develop complex deliverables that reflect deep expertise, influence stakeholders and translate complex privacy and data governance considerations into clear, actionable guidance.

Requirements

10+ years of relevant experience in privacy, data governance, compliance, technology, consulting, legal, or a related field.
Bachelor’s degree or equivalent relevant professional experience; advanced degree preferred.
Experience applying recognized privacy and governance frameworks, including the NIST Privacy Framework, ISO/IEC 27701, or comparable standards.
Deep knowledge of privacy, data governance, and responsible AI frameworks, controls, regulations, and leading practices.
Strong knowledge of global privacy and data protection requirements, including GDPR, UK GDPR, PIPL, LGPD, and U.S. state privacy laws.
Expertise in Privacy by Design principles, privacy risk assessment methodologies, and privacy program management.
Strong understanding of how global privacy and data governance requirements apply to direct-to-consumer, advertising technology, marketing technology, digital product, consumer data ecosystems, and emerging technologies.
Experience supporting privacy, data governance, or technology initiatives within media, sports, entertainment, broadcasting, streaming, digital content, or consumer-facing organizations.
Experience with consent management, identity resolution, data sharing, measurement technologies, and related privacy considerations.
Familiarity with recognized privacy and governance frameworks, including the NIST Privacy Framework and ISO/IEC 27701.
Strong understanding of artificial intelligence governance principles, emerging AI regulatory requirements, and responsible use of personal, confidential, and restricted data in AI-enabled technologies.
Strong cross-functional collaboration skills across legal, technology, analytics, marketing, and business teams.
Sound business judgment with the ability to balance risk, compliance, and operational priorities.
Strong analytical, problem-solving, strategic thinking, and organizational capabilities.
Excellent written and verbal communication skills, with the ability to translate complex concepts into clear, actionable guidance.

Nice To Haves

Professional privacy certifications such as CIPP/US, CIPP/E, CIPM, or CIPT strongly preferred.

Responsibilities

Support the Chief Privacy & Data Governance Officer and the PDG function in the execution and continued development of the NBA’s privacy and data governance strategy, programs, and priorities.
Serve as a subject matter expert and advisor to management and stakeholders across departments, regions, and affiliated leagues on complex privacy and data governance requirements and risk considerations.
Independently assess data practices to identify privacy, governance, and data quality risks and develop practical recommendations and mitigation approaches.
Lead complex cross-functional initiatives within an assigned scope; establish execution plans and deliverables, coordinate project teams, track milestones, dependencies, risks, decisions, and follow-up actions, and provide course correction as needed.
Translate privacy and data governance strategy, policies, regulatory requirements, and leadership decisions into clear workflows, procedures, templates, controls, and accountability mechanisms for business and technology teams.
Lead governance, administration, and continuous improvement activities associated with the privacy and data governance platforms (e.g., Asana, OneTrust, Drata, and others) and privacy management processes.
Manage the operational processes supporting Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), data inventories, individual rights requests, retention and deletion, incident response, regulatory commitments, and remediation activities.
Translate data ownership, stewardship, classification, data quality, metadata, lifecycle, access, retention, and responsible data-use requirements into repeatable practices across business functions and data domains.
Apply global privacy and data governance requirements—including GDPR, UK GDPR, LGPD, U.S. state privacy laws, and relevant local requirements—to operational processes supporting advertising technology, marketing technology, fan engagement, direct-to-consumer services, and digital products.
Coordinate operational requirements related to consent and preference management, identity resolution, profiling and personalization, audience measurement, data sharing, tracking technologies, and other elements of the fan and consumer data lifecycle.
Plan and manage PDG committees, councils, and working groups; prepare agendas and decision materials, document decisions, assign and track follow-up actions, and provide clear records of accountability.
Develop metrics, dashboards, and executive reporting that provide visibility into program demand, progress, significant findings, open risks, control effectiveness, mitigation plans, and business outcomes.
Serve as a subject matter expert on privacy considerations related to media, broadcasting, digital content, audience measurement, direct-to-consumer platforms, advertising technology, marketing technology, digital products, analytics, artificial intelligence, and emerging technologies.
Provide guidance on the responsible use of artificial intelligence, machine learning, and automated decision-making technologies involving personal, confidential, and restricted data.
Monitor evolving privacy, data governance, artificial intelligence, and emerging technology requirements and evaluate their potential impact on NBA business activities, including developments related to the EU AI Act and other emerging global regulatory frameworks.
Support the application of recognized privacy and governance frameworks and standards, including the NIST Privacy Framework and ISO/IEC 27701.
Identify and communicate emerging privacy, data governance, and AI-related risks, industry trends, and leading practices to management and relevant stakeholders.
Develop and deliver communications, training, and awareness initiatives to strengthen privacy and data governance capabilities across the organization.