AVP, Privacy, Cybersecurity & AI Governance — Strategic Leader

Bath & Body Works

Columbus (OH)

On-site

USD 180,000 - 280,000

Full time

6 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Health insurance

401(k) with company match

Paid time off

Parental leave

Employee discount

Job summary

Bath & Body Works, based in Columbus, OH, seeks an Associate Vice President, Legal – Privacy, Cybersecurity & AI Governance to lead enterprise privacy, data governance, cybersecurity, and AI governance programs.

You will provide practical legal counsel, strengthen enterprise risk management, and partner with IT, Digital, Marketing, HR and other functions to embed privacy and responsible AI into business processes.

Qualifications

12+ years of progressive legal experience, including leadership responsibility in a global environment; public company experience preferred.
Deep expertise in privacy law, with strong working knowledge of cybersecurity, data governance, and AI law/regulation.
Demonstrated experience building and operationalizing governance programs, policies, risk assessments, and incident-response processes.
Ability to learn and apply emerging bodies of law to evolving business models, technologies, and markets.
Strong executive communication, judgment, change leadership, collaboration, and decision-making skills.
High integrity and discretion in handling sensitive and confidential information.

Responsibilities

Privacy and AI Governance: Lead and continuously improve privacy, data, and AI governance programs.
Legal Counsel and Risk Management: Advise leaders on privacy, cybersecurity, AI, data use, automation, and emerging legal risks.
Policies and Assessments: Develop and maintain policies, standards, procedures, and risk assessment processes.
Third-Party and Contract Risk: Oversee privacy and data protection reviews for vendors and contracts.
Incident Response: Direct legal support for data and cybersecurity incidents, including investigations and remediation.
Data Subject Rights: Oversee data-subject-rights processes and related automation.
Training and Awareness: Deliver enterprise privacy and AI training.
Litigation and Regulatory Support: Provide subject-matter expertise for privacy-related disputes and regulatory matters.
Cross-Functional Partnership: Partner with IT, Cybersecurity, Digital, Marketing, HR to embed privacy and responsible AI.
Leadership Communication: Present updates to executives and the Board.
Team and Resource Leadership: Lead a high-performing legal team and manage budgets.