Manager, Data Privacy

Harley-Davidson Motor Company; Milwaukee (WI); On-site; USD 130,000 - 208,000; Full time

Benefits offered by this job

Annual bonus programs

Health insurance benefits

401k program

Onsite fitness centers

Employee discounts

Onsite stores

Job summary

Harley-Davidson Motor Company seeks a Manager of Data Privacy to lead its global privacy office and align programs with GDPR/CCPA standards. You will monitor compliance, train staff, and drive privacy risk mitigation across the enterprise.

Reporting to the Data Privacy Officer, you will build roadmaps, coordinate cross-functional teams, and partner with legal, IT, and business units to ensure privacy by design in all processes.

Qualifications

• Typically requires a minimum of 8 years of related experience.
• Experience leading enterprise Data Privacy Office with global accountabilities.
• Knowledge of CCPA and GDPR regulatory requirements.
• Ability to develop frameworks, roadmaps and drive privacy programs.

Responsibilities

• Partner with the DPO to build HDI Data Privacy strategy and framework.
• Translate regulatory guidance into policies and control expectations.
• Oversee governance frameworks for DSAR, DPIA, consent, retention and deletion.
• Conduct PIAs with business processes involving privacy-regulated data.
• Manage global privacy awareness training and incident response readiness.

Skills

Data privacy

Governance

Risk management

PIA governance

Privacy training

Regulatory knowledge

Leadership

Education

Bachelor's degree

CIPP/US

Master's degree

CIPP/EU or CIPM

Job description

Auto req ID: 59585
Title:Manager, Data Privacy
Job Function:Information Technology
Location:JUNEAU
Workplace Category: Onsite
Company:Harley-Davidson Motor Company
Full or Part-Time:Full Time
Shift:SHIFT1

In 1903, out of a small shed in Milwaukee, Wisconsin, four young men lit a cultural wildfire that would grow and spread across geographies and generations. Their innovation and imagination for what was possible on two wheels sparked a transportation revolution that would make Harley-Davidson the most recognizable motorcycle brand in the world. Today, we continue to define motorcycle culture, evoking soul-stirring emotion reflected in every product and experience we deliver - like we have for well over a century and will for generations to come. Are you ready to ride with us?

Harley-Davidson Motor Company, founded in a humble Milwaukee backyard shed in 1903, still calls the city home. Today, its Corporate Campus includes a 4.8-acre public park-a welcoming greenspace open to all. Join our team as aMgr Data Privacy.

Job Summary

The Manager of Harley-Davidson, Inc's Data Privacy reports to the Data Privacy Officer and leads Harley-Davidson's global data privacy office. These functions help monitor and oversee privacy compliance in key business areas and reduce privacy, end-user, and reputational risk to our Brands related to how we handle Privacy Restricted information we hold on our employees, customers, and dealers. These teams are responsible for building and enhancing our workforce's knowledge to ensure proper security and privacy measures exist, and processes are followed when handling Privacy Restricted information throughout the data lifecycle. The Manager, Data Privacy is responsible for building functional roadmaps and strategies aligned with industry-leading frameworks to integrate data privacy functions. This position is directly responsible for monitoring and governing data privacy compliance, including privacy training and awareness programs related to GIS security standards and best practices, as well as global privacy compliance across all relevant business practices and initiatives.

Job Responsibilities

• Partner with the Data Privacy Officer to build the HDI Data Privacy strategy and framework, based on industry-recognized standards, to align operational work, business assessment activities, compliance gaps, and privacy risk mitigation efforts.
• Translate US domestic and International Legal guidance and regulatory requirements into policies, standards, and control expectations, ensuring clear articulation of compliance requirements for first-line teams.
• Provide oversight and maintain existing governance frameworks and standards for core privacy program areas, including:
  • Data subject rights (DSAR) processes and Service Level Agreements (SLA)
  • Data protection impact assessment (PIA) governance and documentation standards
  • Consent and preference management expectations
  • Data retention and deletion requirements
• Work with functional business leaders to conduct PIAs on key business processes involving privacy-regulated data we collect and hold on employees, customers, and dealers; assess privacy risk and prioritize gaps; provide senior business leaders with privacy risk reports and recommendations for remediation; develop a global Privacy Breach Notification
• Process that meets all privacy regulatory requirements/restrictions
• Build and maintain strong business partnerships across key areas at a senior leadership level, bridging their understanding of data privacy concepts and requirements with an understanding of regional and global business practices
• Manage and facilitate a secured process for all HR/Legal/Ethics Privacy-related Investigations
• Manage and maintain our customer-facing Privacy Notice, Consent Language, and Cookie Usage Policy
• Ensure all employee, customer, and regulatory inquiries and complaints are addressed in a compliant and timely manner
• Drive a dynamic and multi-faceted global Data Privacy Awareness Training program for employees and contractors to heighten awareness and reduce security/privacy risk due to human error; drive campaigns to test business behavior and track end-user knowledge to drive ongoing program content and effectiveness

Education Requirements

High School Diploma or Equivalent Required

Education Specifications

• Bachelor's Degree in business management, information systems, or a related discipline
• CIPP/US certification
• Master's Degree in related field is Preferred
• CIPP/EU or CIPM certification is Preferred

Experience Requirements

Required

• Typically requires a minimum of 8 years of related experience.
• 8+ years of relevant professional experience directly related to data privacy, audit and compliance, or information security
• Demonstrated experience working in an enterprise-level Data Privacy Office with global accountabilities. Direct experience leading Privacy Impact Assessments with business leaders and managers.
• Possess comprehensive knowledge and understanding of the primary data privacy principles and key industry-leading regulations such as:
  • California Consumer Privacy Act (CCPA)
  • European General Data Protection Regulation (GDPR)
• Proven ability to address privacy issues, incidents and inquiries from data subjects and to respond to them with a high degree of certainty and comprehension.
• Ability to define and establish comprehensive procedures that integrate with key business processes to ensure privacy standards and best practices are part of privacy compliance by design
• Excellent communication and presentation skills with demonstrated skill in presenting complex detail around regulations clearly and to a variety of audience members
• Proven ability to develop frameworks, strategies and roadmaps and to provide direction across all areas of accountability as well as to work closely with the Corporate Information Security Office (CISO) organization where dependencies exist
• Strong leadership, organization, communication, and process management skills; ability to lead and manage high performing teams, and an ability to develop a continuous improvement mentality in all operational activities

Preferred

• Experience in building and leading a team with a proven ability in developing capabilities, attracting and retaining a core team of collaborative professionals and creating an organization viewed as a highly attractive place to work.
• Experience in delivering privacy awareness presentations or training modules/content for a global audience

The pay range shown represents the national average pay range for this role. Your pay may be more or less than the stated range and is dependent on your geographic location and level of experience.

• annual bonus programs
• health insurance benefits
• a 401k program
• onsite fitness centers and employee stores
• employee discounts on products and accessories
• and more

Learn more about Harley-Davidson here.

Applicants must be currently authorized to work in the United States.

Direct Reports: Yes
Travel Required: 0 - 10%
Pay Range:$129,900 - $207,800

Visa Sponsorship: This position is not eligible for visa sponsorship or visa transfer
Relocation: This position is eligible for domestic relocation assistance (within posted country)