Privacy Lead

About the role

Serves as the company's privacy expert, shaping enterprise privacy processes, data governance principles, and privacy-forward design. Advises leaders and cross-functional partners on complex privacy matters, privacy requirements, risk assessments, and enterprise initiatives to develop practical solutions with broad business and regulatory impact.

Responsibilities

• Represent privacy across the enterprise consulting on privacy programs to ensure compliance with privacy laws and regulations and establish readiness for the future so that privacy acts as a differentiator that helps unlock the value of data.
• Responsible for conducting risk assessments and risk oversight to ensure compliance with privacy policies and regulation.
• Relied on as the Privacy Expert and collaborating across the Enterprise, Affiliates and field force on privacy initiatives and issues.
• Expert in interpreting data classification questions, including understanding NM's many types of product and client data and how it needs to be interpreted.
• Serve as Privacy expert on Corporate Initiatives.
• Designs and delivers training needed for the enterprise, affiliates and field force that ensures strong privacy understanding of state and federal governance agencies and laws, and the highest data protections.
• Create solutions to address changing regulatory environment, including developing process changes and influencing internal stakeholders to address changes.
• Develops and analyzes metrics and reports and communication/awareness efforts for the Home Office and the Field.
• Works closely with the Information Risk Management Policies, Controls and communications Team in Technology to manage and coordinate information protection policies, procedures, and resource material on internal and field facing dissemination platforms.

Requirements

• Bachelor's degree in business, information technology, or related field.
• Minimum of 10 years' experience in Privacy, Records and Information Management, Data Governance, Compliance, Information Risk, or a related discipline.
• Understanding of the Financial Service Industry (GLBA); Healthcare (HIPAA); Technologies (Functionalities of SaaS) and technology concepts.
• Highly effective interpersonal skills with the ability to effectively interact, influence, and persuade others.
• Strong organizational skills with the ability to set priorities and carry out multiple, diverse assignments.
• Proven ability to lead cross-departmental projects, translating complex requirements into actionable plans and driving execution.
• Proven ability to negotiate and influence with all areas of the company without direct authority.
• Superior verbal and written communication skills, as well as presentation and platform speaking skills.
• Strong documentation skills, including the ability to clearly summarize complex privacy matters in risk assessments, guidance, and stakeholder-ready materials.
• Demonstrated ability to lead, coach and mentor other staff members.
• Certified Privacy-related experience with certification, such as Information Protection Professional (CIPP) or Certified Information Privacy Manager (CIPM) strongly preferred.
• Understanding of privacy frameworks, such as NIST, ISO, and SANS.
• Understanding of Data Structures and Architecture such as: Domains, Databases, Tables, and BLOBS preferred.
• Understanding Lines of Defense Understanding; RSA Archer Experience preferred.
• Experience with Privacy Technology Suites (e.g.: OneTrust), ServiceNow and Data Governance technology (e.g. Atlan) preferred.

Skills

• Documentation - Prepares communicable material that is used to describe, explain or instruct regarding some attributes of an object, system or procedure.
• Prioritization - Assesses and