FTC Data Privacy Lead

Capgemini; United States; Remote; USD 83,000 - 129,000; Full time

Job summary

Capgemini seeks a Grade D Data Privacy & AI Governance Expert to lead enterprise privacy, data governance and responsible AI transformations in the United States. Translate FTC obligations and privacy commitments into practical operating models, controls and audit-ready evidence.

You will advise senior leaders, lead executive workshops and drive architecture, investments and measurable outcomes across complex global environments.

Qualifications

• Typically 10+ years in privacy, data governance, risk, compliance, data management, architecture or consulting.
• Experience leading complex enterprise programs and multiple implementation lifecycles.
• Hands-on credibility with data governance and privacy platforms, data architectures and AI lifecycle controls.
• Experience supporting regulatory readiness, investigations, audits or remediation is strongly preferred.
• Executive communication, consulting, facilitation, negotiation and delivery governance across legal, business, security, data, cloud and AI teams.

Responsibilities

• Advise CDO, CIO, CTO, Legal, Privacy, Risk, Security, Compliance and business leaders; lead executive workshops and convert obligations into strategies and roadmaps.
• Lead FTC-aligned privacy and data-protection assessments covering data inventories, notices, consent management, access controls and incidents.
• Design privacy-by-design and governance operating models, policies, controls, RACI models and evidence requirements.
• Lead platform evaluation, architecture and integration across data catalogs, lineage, MDM, observability, GRC and AI governance capabilities.
• Own solution quality, delivery risk, executive communications and stakeholder alignment; mentor practitioners and create reusable assets.

Skills

Executive communication

Consulting

Facilitation

Negotiation

Delivery governance

Leadership

Education

Bachelor’s degree in Law, Privacy, Cybersecurity, Computer Science, Information Systems, Engineering, Data Science, Business or related field

Tools

OneTrust

BigID

Securiti

TrustArc

Informatica IDMC/CDGC

Collibra

Alation

Ataccama

Atlan

Microsoft Purview

IBM watsonx.governance

Databricks Unity Catalog

Job description

We are seeking a Grade D Data Privacy & AI Governance Expert to shape and lead enterprise privacy, data governance and responsible AI transformations. The role translates FTC obligations, privacy commitments and related U.S. requirements into practical operating models, platform-enabled controls and audit-ready evidence. This leader will use AI and agentic capabilities to accelerate governance while establishing the policies, accountable ownership, technical controls and human oversight required to govern AI systems and autonomous agents responsibly.

Your role:

Advise CDO, CIO, CTO, Legal, Privacy, Risk, Security, Compliance and business leaders; lead executive workshops and convert ambiguous obligations into strategies, roadmaps, architectures, investment choices and measurable outcomes.

Lead FTC-aligned privacy and data-protection assessments covering data inventories and flows, privacy notices and commitments, consent and preference management, collection and purpose limitation, sensitive data, retention and deletion, access controls, third parties, incident response, monitoring and substantiation of claims.

Design privacy-by-design and governance operating models, decision rights, policies, standards, controls, RACI models, escalation paths, evidence requirements, KPIs and remediation portfolios across complex global environments.

Lead platform evaluation, architecture, implementation assurance and integration across data catalogs, privacy management, lineage, data quality, MDM, observability, GRC, cloud and AI governance capabilities.

Own solution quality, design authority, delivery risk, executive communications and stakeholder alignment; mentor practitioners and create reusable company methods, accelerators and thought leadership.

FTC, privacy and regulatory capabilities:

Deep understanding of the FTC Act’s unfair or deceptive practices standard and practical application to privacy, security, advertising and AI-related representations; ability to translate enforcement themes, consent orders and business guidance into control objectives and evidence.

Working knowledge of relevant U.S. privacy and sector obligations, including state comprehensive privacy laws, COPPA, FCRA, GLBA Safeguards, Health Breach Notification and breach-response requirements, with the judgment to engage legal counsel for formal interpretation.

AI for governance | Governance for AI:

Apply GenAI and agents to discover and classify data, enrich metadata, map obligations to policies and controls, draft privacy assessments, recommend quality rules, triage issues, collect evidence and continuously monitor control performance.

Design progressive autonomy with confidence thresholds, least privilege, human-in-the-loop or human-on-the-loop approvals, segregation of duties, exception routing, traceability, observability, rollback and named accountability.

Operationalize AI governance across use-case intake, risk tiering, data and RAG readiness, model and agent inventory, privacy and security review, evaluation, deployment gates, monitoring, incidents, recertification, retirement and third parties.

Address training-data and prompt privacy, confidential-data use, provenance, purpose limitation, data minimization, output risks, bias, explainability, agent identity, tool permissions, prompt injection, data leakage, unsafe action and cascading failures.

Data privacy & AI governance expert:

Data governance and privacy platform expertise:

Architecture and implementation knowledge across several leading platforms such as OneTrust, BigID, Securiti, TrustArc, Informatica IDMC/CDGC, Collibra, Alation, Ataccama, Atlan, Microsoft Purview, IBM watsonx.governance, Databricks Unity Catalog and comparable cloud-native governance, privacy, quality, MDM and AI governance services.

Ability to compare capabilities without platform bias and design interoperable patterns for metadata, lineage, classification, consent, rights, retention, policy enforcement, risk and control mapping, workflow, evidence and reporting.

Integration experience across multi-cloud, lakehouse, warehouse, ERP, CRM, SaaS, MDM and on-premises landscapes using APIs, events, batch, semantic layers, knowledge graphs, policy-as-code and governed agent tool access.

Required experience and capabilities:

Typically 10+ years in privacy, data governance, risk, compliance, data management, architecture or consulting, including leadership of complex enterprise programs and multiple implementation lifecycles.

Demonstrated success operationalizing privacy obligations and commitments through processes, controls, technology and evidence; experience supporting regulatory readiness, investigations, audits or remediation is strongly preferred.

Hands-on credibility with data governance and privacy platforms, data architectures and AI lifecycle controls; working knowledge of RAG, agent orchestration, MCP/tool use, semantic models, knowledge graphs, evaluation and monitoring.

Executive communication, consulting, facilitation, negotiation, proposal shaping, estimation, delivery governance and leadership across legal, business, security, data, cloud and AI teams.

Bachelor’s degree in Law, Privacy, Cybersecurity, Computer Science, Information Systems, Engineering, Data Science, Business or a related discipline, or equivalent relevant experience. J.D. is valued for legal-advisory backgrounds but is not required for this consulting role.

Grade D leadership expectations:

Design and govern complete enterprise solutions connecting business, information, applications, technology, security, privacy, AI, people, process and operating-model decisions.

Operate as a trusted senior advisor and workstream or architecture lead; turn uncertainty into clear options, decisions, accountable plans and measurable value while balancing innovation, control, speed, cost and risk.

Build company's capability through delivery excellence, reusable assets, coaching, quality reviews, alliances, market development and evidence-based thought leadership.

Preferred certifications and credentials:

Privacy: IAPP CIPP/US plus CIPM; CIPT for privacy engineering; Fellow of Information Privacy (FIP) for candidates meeting IAPP requirements.

AI governance and management systems: IAPP AIGP; ISO/IEC 42001 Lead Implementer or Lead Auditor; relevant ISACA AI, risk or controls credentials.

Data governance and architecture: DAMA CDMP, EDM Council DCAM, TOGAF Enterprise Architecture Practitioner and IAF certification or current equivalent.

Platform credentials from OneTrust, BigID, Securiti, Informatica, Collibra, Alation, Ataccama, Microsoft, Databricks or IBM; CIPP/E, CISA, CRISC, CISM or CISSP are beneficial when supported by relevant experience.

Success measures and suggested interview evidence:

Privacy commitments and regulatory obligations are traceable to controls, owners, systems and evidence; high-risk gaps move to closure and audit readiness improves against agreed baselines.

Governance processes are adopted, platform capabilities are used, evidence is reliable, AI risks are monitored and stakeholder confidence improves.

Candidate presents two enterprise privacy or governance engagements and designs an agent-enabled privacy workflow showing inputs, decisions, controls, approvals, evidence, monitoring, exceptions and rollback.

The pay range that the employer in good faith reasonably expects to pay for this position is $60.10/hour - $93.90/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.

Tundra Technical Solutions is among North America’s leading providers of Staffing and Consulting Services. Our success and our clients’ success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.