Associate Vice President, Legal – Privacy, Cybersecurity & AI Governance

Cybersecurity Jobs; Columbus (OH); On-site; USD 178,000 - 271,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Onsite wellness center

401(k) with company match

Paid time off

Parental leave

Education benefits

Merchandise discounts

Job summary

Bath & Body Works seeks an Associate Vice President, Legal for Privacy, Cybersecurity & AI Governance in Columbus, OH, onsite. The role leads privacy, cybersecurity, data governance, and AI governance initiatives aligned with business priorities and regulatory requirements.

Requirements include a JD, bar license, 12+ years of progressive legal experience, and strong leadership. You will collaborate with IT, Cybersecurity, Digital, Marketing, and HR to embed privacy and responsible AI into

Qualifications

• Strong knowledge of privacy law and cybersecurity obligations.
• Experience building and operationalizing governance programs.
• Ability to translate complex requirements into practical solutions.
• Experience with incident response and data-subject rights processes.

Responsibilities

• Lead privacy, data, and AI governance programs aligned to business priorities.
• Advise executives on privacy, cybersecurity, AI, and data use risks.
• Develop and maintain privacy, security, and AI risk policies and procedures.
• Oversee data-subject rights processing and related automation.
• Provide legal support for data breaches, incidents, and regulatory matters.

Skills

Privacy law

Cybersecurity

Data governance

AI governance

Executive communication

Leadership

Education

Juris Doctor

Bar license

Bachelor’s degree

Job description

Bath & Body Works is hiring an Associate Vice President, Legal for Privacy, Cybersecurity & AI Governance in Columbus, OH (onsite).

Responsibilities

• Lead and continuously improve privacy, data, and AI governance programs aligned to business priorities, legal requirements, and recognized frameworks, including NIST
• Advise executives and business leaders on privacy, cybersecurity, AI, data use, automation, and emerging legal risk
• Translate complex requirements into practical, business-focused solutions
• Develop and maintain policies, standards, procedures, and privacy and AI risk-assessment processes to identify, prioritize, and mitigate risk
• Oversee privacy, cybersecurity, data protection, and AI reviews for vendors and commercial agreements
• Maintain relevant contract terms and templates
• Direct legal support for data and cybersecurity incidents, including preparedness exercises, investigations, escalation, notification, reporting, and remediation
• Oversee compliant and efficient data-subject-rights processes and supporting automation
• Deliver enterprise and role-based education to strengthen privacy, cybersecurity, and AI accountability
• Provide subject-matter expertise for privacy-related disputes, investigations, litigation, and regulatory matters in partnership with internal and external counsel
• Partner with IT, Cybersecurity, Digital, Marketing, HR, and other functions to embed privacy and responsible AI into business processes and technology initiatives
• Present clear assessments, recommendations, and program updates to executive leaders and, as appropriate, the Board of Directors
• Lead, develop, and retain a high-performing legal team while managing priorities, external counsel, and budget responsibilities

Requirements

• 12+ years of progressive legal experience, including leadership responsibility in a global environment (public company experience preferred)
• Deep expertise in privacy law with strong working knowledge of cybersecurity, data governance, and AI law and regulation
• Proven experience building and operationalizing governance programs, policies, risk assessments, and incident-response processes
• Ability to learn and apply emerging bodies of law to evolving business models, technologies, and markets
• Strong skills in executive communication, judgment, change leadership, collaboration, and decision-making
• High integrity and discretion when handling sensitive, confidential information

Technologies

• NIST

Education

• Juris Doctor degree from an accredited law school
• Active license in good standing in at least one U.S. jurisdiction
• Bachelor’s degree

Compensation

• USD 178,000 - 270,600 per year

Core Competencies

• Drives Results
• Action Oriented
• Collaborates
• Decision Making
• Nimble Learning

Benefits

• Medical, dental, vision, and pharmacy coverage
• Onsite wellness center and pharmacy at the Columbus, OH home office
• No-cost mental health and well-being support through the Employee Assistance Program (EAP)
• 401(k) with company match
• Associate Stock Purchase Program with discount
• Paid time off
• Paid parental leave
• Access to family building benefits
• Home, auto and pet insurance
• Company-provided Care.com subscription
• Tuition reimbursement and scholarship opportunities for post-secondary education
• Complimentary products and 40% merchandise discount
• More details at bbwbenefits.com