Head of Privacy Operations & Governance

Wpp Group; Parsippany-Troy Hills (NJ); On-site; USD 90,000 - 180,000; Full time

Job summary

CMI Media Group is seeking a senior privacy leader to build and improve governance, processes, and controls for responsible data use across the agency. You will partner with Legal, Data Security, Supplier Management, and client teams to translate guidance into practical operating standards.

The role leads privacy programs, drives framework development, and manages consumer privacy rights processes, third‑party risk, and data broker obligations, with a strong cross‑functional focus.

Qualifications

• 8+ years of experience in data privacy operations and program management.
• Experience leading privacy governance and controls.
• Knowledge of U.S. state privacy laws and data brokers.
• Ability to translate regulatory guidance into actionable processes.

Responsibilities

• Establish and improve the privacy operating model and escalation pathways.
• Develop privacy policies, SOPs, playbooks, and training.
• Operationalize guidance on U.S. privacy requirements including data broker rules.
• Oversee data broker registrations and consumer privacy rights processes.
• Lead risk assessments involving suppliers, media partners, AI, and clients.
• Collaborate with Legal and contracting to turn obligations into processes.
• Represent agency's privacy practices in client discussions and programs.
• Identify opportunities to strengthen privacy operations and build confidence.

Skills

Privacy operations

Program management

Regulatory compliance

Data governance

Stakeholder management

Risk assessment

Education

Bachelor's degree

Job description

CMI Media Group is seeking a senior privacy leader to build and improve governance, processes, and controls for responsible data use across the agency. You will partner with Legal, Data Security, Supplier Management, and client teams to translate guidance into practical operating standards.

The role leads privacy programs, drives framework development, and manages consumer privacy rights processes, third‑party risk, and data broker obligations, with a strong cross‑functional focus.