Director, Data Privacy Operations & Governance

CMI Media Group; Philadelphia (Philadelphia County); On-site; USD 90,000 - 180,000; Full time

Job summary

CMI Media Group seeks a senior privacy leader to build and improve governance, processes, and controls that help an agency work with data responsibly and consistently. In a cross‑functional role, you’ll partner with Legal, Data Security, Supplier Management, Contracting, Client Leadership, Finance, Technology, and business teams.

You’ll translate approved legal and regulatory guidance into clear operating standards for day‑to‑day use and serve as a senior privacy representative in client and

Qualifications

• 8+ years in data privacy operations or governance.
• Experience leading governance frameworks and consumer privacy rights processes.
• Strong knowledge of U.S. state privacy laws and data broker requirements.
• Ability to translate regulatory guidance into actionable processes.

Responsibilities

• Establish and improve the privacy operating model and controls.
• Develop practical privacy policies, SOPs, and training.
• Operationalize guidance on U.S. privacy requirements and data broker obligations.
• Oversee data broker registrations and consumer privacy rights workflows.
• Lead privacy risk assessments and third‑party reviews with vendors.

Skills

8+ years experience in data privacy

privacy program management

regulatory compliance

data governance

risk assessment

stakeholder management

contractual/privacy obligations

communication with senior stakeholders

Education

Bachelor’s degree in a relevant discipline

Job description

Make privacy practical—and build the systems that make it stick.

Privacy requirements are evolving, and putting them into practice takes more than policies. We’re looking for a senior privacy leader to build and improve the governance, processes, and controls that help an agency work with data responsibly and consistently.

In this cross-functional role, you’ll partner with Legal, Data Security, Supplier Management, Contracting, Client Leadership, Finance, Technology, and business teams. You’ll translate approved legal and regulatory guidance into clear operating standards people can use in their day-to-day work. You’ll also serve as a senior privacy representative in conversations with clients, client legal and privacy teams, data and media suppliers, and other external partners.

What you’ll do

• Establish and improve the privacy operating model, including governance, decision rights, accountability, controls, documentation, and escalation pathways.
• Develop practical privacy policies, SOPs, playbooks, decision frameworks, and training.
• Partner with Legal to operationalize approved guidance on evolving U.S. federal and state requirements, including data broker obligations, consumer health data, and advertising and media privacy.
• Oversee applicable data broker registrations and reporting, as well as consumer privacy rights processes for access, deletion, correction, and opt‑outs, including Do Not Sell or Share requests.
• Lead or coordinate privacy impact, data‑use, and third‑party risk assessments involving suppliers, media partners, technologies, AI solutions, client services, and business processes. Recommend controls proportionate to the risks.
• Work with Legal, Contracting, and Supplier Management to support privacy‑related contract reviews and turn approved obligations into workable processes and controls.
• Represent the agency’s privacy practices in client, supplier, and partner discussions; communicate requirements clearly and help teams find practical paths forward.
• Identify opportunities to strengthen privacy operations, improve consistency, and build organizational and client confidence.

What you’ll bring

• 8+ years of progressive experience in data privacy operations, privacy program management, regulatory compliance, legal operations, data governance, risk management, or client‑facing privacy advisory work.
• Experience owning or leading significant components of a privacy program, such as governance frameworks, controls, SOPs, assessment practices, consumer privacy rights processes, or data broker compliance.
• Strong working knowledge of U.S. state privacy laws and privacy requirements related to data brokers, consumer health data, advertising, and media.
• Experience conducting or overseeing privacy impact assessments, third‑party reviews, supplier vetting, data‑use assessments, or similar risk evaluations.
• The ability to translate legal, regulatory, technical, and contractual requirements into clear, executable business processes.
• Credibility with senior stakeholders, clients, privacy officers, Legal teams, and suppliers, along with the judgment to balance privacy obligations, business needs, client expectations, and operational feasibility.
• A bachelor’s degree in a relevant discipline—or equivalent professional experience.

Particularly valuable: Experience in healthcare, pharmaceutical marketing, media, advertising agencies, data, or technology. CIPP/US, CIPM, or another relevant certification is preferred.

The base salary for this position at the time of this posting may range from $90,000 to $180,000. Individual compensation varies based on job related factors, including business needs, experience, level of responsibility and qualifications.