Director, Data Privacy Operations & Governance

Wpp Group; Parsippany-Troy Hills (NJ); On-site; USD 90,000 - 180,000; Full time

Job summary

CMI Media Group is seeking a senior privacy leader to build and improve governance, processes, and controls for responsible data use across the agency. You will partner with Legal, Data Security, Supplier Management, and client teams to translate guidance into practical operating standards.

The role leads privacy programs, drives framework development, and manages consumer privacy rights processes, third‑party risk, and data broker obligations, with a strong cross‑functional focus.

Qualifications

• 8+ years of experience in data privacy operations and program management.
• Experience leading privacy governance and controls.
• Knowledge of U.S. state privacy laws and data brokers.
• Ability to translate regulatory guidance into actionable processes.

Responsibilities

• Establish and improve the privacy operating model and escalation pathways.
• Develop privacy policies, SOPs, playbooks, and training.
• Operationalize guidance on U.S. privacy requirements including data broker rules.
• Oversee data broker registrations and consumer privacy rights processes.
• Lead risk assessments involving suppliers, media partners, AI, and clients.
• Collaborate with Legal and contracting to turn obligations into processes.
• Represent agency's privacy practices in client discussions and programs.
• Identify opportunities to strengthen privacy operations and build confidence.

Skills

Privacy operations

Program management

Regulatory compliance

Data governance

Stakeholder management

Risk assessment

Education

Bachelor's degree

Job description

Description

Position at CMI Media Group

Make privacy practical-and build the systems that make it stick.

Privacy requirements are evolving, and putting them into practice takes more than policies. We're looking for a senior privacy leader to build and improve the governance, processes, and controls that help an agency work with data responsibly and consistently.

In this cross-functional role, you'll partner with Legal, Data Security, Supplier Management, Contracting, Client Leadership, Finance, Technology, and business teams. You'll translate approved legal and regulatory guidance into clear operating standards people can use in their day-to-day work. You'll also serve as a senior privacy representative in conversations with clients, client legal and privacy teams, data and media suppliers, and other external partners.

What you'll do

• Establish and improve the privacy operating model, including governance, decision rights, accountability, controls, documentation, and escalation pathways.
• Develop practical privacy policies, SOPs, playbooks, decision frameworks, and training.
• Partner with Legal to operationalize approved guidance on evolving U.S. federal and state requirements, including data broker obligations, consumer health data, and advertising and media privacy.
• Oversee applicable data broker registrations and reporting, as well as consumer privacy rights processes for access, deletion, correction, and opt-outs, including Do Not Sell or Share requests.
• Lead or coordinate privacy impact, data-use, and third-party risk assessments involving suppliers, media partners, technologies, AI solutions, client services, and business processes. Recommend controls proportionate to the risks.
• Work with Legal, Contracting, and Supplier Management to support privacy-related contract reviews and turn approved obligations into workable processes and controls.
• Represent the agency's privacy practices in client, supplier, and partner discussions; communicate requirements clearly and help teams find practical paths forward.
• Identify opportunities to strengthen privacy operations, improve consistency, and build organizational and client confidence.

What you'll bring

• 8+ years of progressive experience in data privacy operations, privacy program management, regulatory compliance, legal operations, data governance, risk management, or client-facing privacy advisory work.
• Experience owning or leading significant components of a privacy program, such as governance frameworks, controls, SOPs, assessment practices, consumer privacy rights processes, or data broker compliance.
• Strong working knowledge of U.S. state privacy laws and privacy requirements related to data brokers, consumer health data, advertising, and media.
• Experience conducting or overseeing privacy impact assessments, third-party reviews, supplier vetting, data-use assessments, or similar risk evaluations.
• The ability to translate legal, regulatory, technical, and contractual requirements into clear, executable business processes.
• Credibility with senior stakeholders, clients, privacy officers, Legal teams, and suppliers, along with the judgment to balance privacy obligations, business needs, client expectations, and operational feasibility.
• A bachelor's degree in a relevant discipline-or equivalent professional experience.

Particularly valuable: Experience in healthcare, pharmaceutical marketing, media, advertising agencies, data, or technology. CIPP/US, CIPM, or another relevant certification is preferred.

The base salary for this position at the time of this posting may range from $90,000 to $180,000. Individual compensation varies based on job related factors, including business needs, experience, level of responsibility and qualifications.