Director, Implementation
Fieldguide
Cyber SecurityPMP
Senior Program Manager, Privacy, AI and Data Governance
Alteryx
full-time
Posted on:
Origin: • 🇺🇸 United States • Colorado
Visit company websiteSalary
💰 $183,000 - $212,000 per year
Job Level
Senior
Tech Stack
Cyber SecurityPMPRealm
About the role
- Responsible for tactical, operational management of all programs overseen by the Privacy and Product legal team to align with business priorities while ensuring compliance
- Coordinate across senior-level business, engineering, IT, and system administration stakeholders to implement programmatic measures, including embedding data privacy and security by design and default, data governance and retention, and responsible AI into existing and future proprietary and enterprise systems
- Navigate between strategic business objectives and systems/process concepts from the perspective of compliance with current and developing global regulations, governance, and industry best practices
- Drive appropriate preventive, detective, and remedial controls for privacy risks across the organization as well as for evolving AI regulations
- Assist with developing and executing data protection, governance, and data management initiatives for cross-functional teams
- Regularly consult with enterprise stakeholders to develop strategies to minimize risk, carry out risk mitigation measures, and improve safeguards aimed at protecting information assets
- Establish and maintain mechanisms for assessing and demonstrating continuous improvement with key metrics for privacy compliance, data governance, and responsible AI
- Reports to the Vice President, Privacy and Product Counsel
- Support the company’s privacy compliance measures through conducting privacy risk assessments, business process assessments, privacy incident management, and data subject access requests
- Maintain inventory of enterprise AI use cases via the completion of AI Risk Assessments and assist business stakeholders with populating these assessments
- Communicate the company’s privacy and security compliance mechanisms, responsible AI principles, data retention, and position on usage data in response to customer and internal requests for data sharing
- Ensure alignment between the company’s global cybersecurity, privacy, responsible AI, and data management practices and initiatives
- Develop and maintain mechanisms for complying with the GDPR’s Article 30 requirements for data processing logs and assist the business with documenting and updating such records on an annual basis
- Lead cross-functional initiatives to collect and maintain an inventory of all internal tools and systems and assign relevant assessments to business teams; flag risks for high-impact systems that have not been approved by all appropriate assessment mechanisms
- In collaboration with the Digital Marketing team, implement and oversee appropriate mechanisms for privacy and marketing compliance on the company’s websites and those of its third-party data processors and data brokers, including cookie settings and consents, do-not-sell, opt-ins, webforms, and user preference centers; regularly audit compliance
- Align program initiatives to the NIST Privacy Framework and additional regulatory frameworks as requested by the business (e.g., FedRAMP, FIPS, HIPAA)
- Ensure compliance with the company’s responsible AI principles, governance mechanisms, and company policies on AI and align relevant program initiatives to the NIST Risk Management Framework and evolving AI regulations
- Collaborate with Legal, Information Security, and Information Technology to identify, document, and mitigate privacy and compliance risks through the implementation and maintenance of a centralized risk register
- Develop and lead awareness mechanisms and initiatives aimed at addressing identified risks
- Maintain an inventory of third parties that handle personal data or supply personal data to the company, support due diligence reviews and periodic audits of vendors and partners for compliance with data protection obligations
- Regularly develop and deliver targeted trainings and awareness campaigns aimed at educating the company about the team’s programs and initiatives
- Develop and maintain materials aimed at enabling key functions to self-service common programmatic requirements, FAQs and one-pagers on privacy and AI topics
- Develop and report out metrics for the team, including development of reports and dashboards
- Participate in continued education on topics pertaining to the role and update leadership on related risks and regulatory or industry developments
- Lead, support, and enable initiatives, ensure effective alignment between senior leadership and cross-functional teams in project planning and execution; track initiative and project progress and provide regular updates to stakeholders including the AI Governance Board and Executive Leadership Team
- Provide post-mitigation and implementation analyses to assess effectiveness and recommend improvements; lead cross-functional teams in identifying and documenting gap assessments or other post-incident debriefs
- Perform other duties and projects as assigned
Requirements
- Demonstrates knowledge of, or quickly comes up to speed on, key privacy concepts and compliance obligations related to state, federal, and international privacy regulations and laws as they pertain to the company’s privacy program
- Demonstrates knowledge of, or quickly comes up to speed on, key concepts pertaining to responsible AI and the regulatory landscape for development of AI technologies as well as the risks pertaining to internal use of enterprise AI
- Effective, results-driven program and project management skills with the ability to manage multiple work streams across functions and teams
- Technical and organizational skills and experience required to deploy and maintain records and data management tools and inventories as well to deploy data governance processes
- Strong relationship-building, problem-solving, and collaboration skills and the ability to influence and communicate complex concepts to technical and non-technical staff
- Demonstrates delivery of pragmatic, business-focused solutions
- Advanced skills using the tools and applications necessary for successful completion of the role’s duties, including the Microsoft Office 360 suite of applications, such as Teams and SharePoint, Visio or other tools needed to create data flow maps, and project management tracking applications, such as Asana and Jira
- Proven ability to successfully multi-task, remain responsive and agile to changes in business priorities, and to deliver pragmatic, risk-based recommendations to the business
- Ability to create and deliver effective presentations to business teams and executive leadership, including, where required, leading meetings or speaking before large groups
- Demonstrated resourcefulness and ability to work and manage time spent on projects independently and with little supervision while performing duties
- Demonstrated ability to utilize data-driven insights to track progress, measure insights, and report on key metrics
- Proven track record in program and project management, risk management, and strategic planning; experience working with cross-functional teams and managing complex initiatives through to completion
- Excellent communication and interpersonal skills and high emotional intelligence, with the ability to influence and engage stakeholders at all levels
- Bachelor’s degree and a minimum of ten (10) years’ direct experience working in one or more disciplines related to the role (e.g., policy, law, compliance, information security, operational risk management, audit, records management, program, and project management)
- IAPP Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), or Certified Information Security Manager (CISM) or willingness to complete such certification within a reasonable time following hire
- Minimum of ten (10) years’ direct experience in either project management or records management and implementing and using project and records management tools and concepts
- Project management certification (PMP) preferred
- Change management certification (CCMP) strongly preferred
- Advanced understanding of core privacy and data protection principles under the GDPR and/or CCPA, direct marketing techniques, online privacy, or information security
- Hands-on experience working across teams on initiatives aimed at responsible AI principles or implementation of industry best practices within the realm of AI development and use
- Strong skills and experience utilizing AI tools for business, such as creating operational efficiencies using OpenAI’s ChatGPT, or the willingness to learn and deploy AI technologies
- Experience deploying data privacy tool sets, such as implementing and working within Mine.OS
- Experience directly using the Alteryx suite of products to drive business processes and efficiencies
