Privacy Governance Administrator (remote)

Hallmark Health System, Inc.; Kansas City (MO); Hybride; USD 120 000 - 180 000; Plein temps

Résumé du poste

Hallmark Health System, Inc. seeks a Privacy Governance Administrator to steward the privacy program across Hallmark Media and Hallmark Product & Retail.

You will lead governance, risk oversight, and data practices with Legal, Information Security, IT, Procurement, and Analytics to ensure personal data is managed responsibly. You will drive DSARs, data inventories and mapping, PIAs, vendor privacy reviews, and governance operations.

Qualifications

• Bachelor's degree or 4 years of professional work experience.
• At least 10 years of experience in data, analytics, data governance, information management, privacy, compliance, risk management, or related disciplines.
• At least 3 years of experience supporting or leading data privacy, privacy governance, privacy-by-design, or regulatory initiatives.
• Experience managing projects or programs, including developing action plans, coordinating work across multiple stakeholders, tracking deliverables, and meeting deadlines.
• Experience leading cross-functional governance, compliance, operational, or transformation initiatives that require driving accountability and influencing outcomes across multiple stakeholder groups.
• Experience documenting and analyzing data flows, system integrations, data maps, and the lifecycle of personal information across processes and technology systems.
• Ability to translate legal, regulatory, and policy requirements into practical business actions and controls.

Responsabilités

• Lead Privacy Assessments (PAs) and Privacy Impact Assessments (PIAs) for products, technologies, vendors, and processes.
• Coordinate audits, regulatory inquiries, and compliance reviews with remediation.
• Embed privacy into business operations across Legal, Security, IT, Procurement, Marketing, Analytics, and other functions.
• Develop privacy scorecards, metrics, and executive reporting.

Connaissances

Privacy governance

DSARs management

PIAs and PAs

Data inventories & maps

Vendor privacy reviews

Regulatory compliance

Cross-functional collaboration

Leadership

Risk-based decision making

Communication

Formation

Bachelor's degree or 4 years of professional work experience

Outils

OneTrust

Description du poste

Who We Are And What We Do

The Consumer Marketing Analytics team provides powerful consulting along with key reporting and insightful analyses to the Hallmark Brand business. We focus on using data to understand our consumers, leveraging a vast number of sources to our advantage. We focus on complete storytelling to form an understanding of what has happened and use trends and analysis to drive future decisions. We are looking for motivated individuals who love exploring data to uncover hidden trends and developing new experiments to help meet our consumers where they are, with the right message, at the right time, and ultimately drive the business forward.

Who We Are And What We Do

The Consumer Marketing Analytics team provides powerful consulting along with key reporting and insightful analyses to the Hallmark Brand business. We focus on using data to understand our consumers, leveraging a vast number of sources to our advantage. We focus on complete storytelling to form an understanding of what has happened and use trends and analysis to drive future decisions. We are looking for motivated individuals who love exploring data to uncover hidden trends and developing new experiments to help meet our consumers where they are, with the right message, at the right time, and ultimately drive the business forward.

WHAT YOU'LL DO & HOW IT SHAPES OUR SUCCESS

The Privacy Governance Administrator serves as a key steward of Hallmark's privacy program across Hallmark Media and Hallmark Product & Retail, helping ensure privacy principles are embedded into business operations, technology decisions, and data practices. This role provides governance, oversight, and operational leadership across the privacy landscape, partnering closely with Legal, Information Security, Information Technology, Procurement, Data & Analytics, and business leaders to ensure personal data is managed responsibly, ethically, and in compliance with applicable laws and company policies.

You will drive the execution of critical privacy processes, including Data Subject Access Requests (DSARs), data inventories, and data mapping, privacy impact assessments, vendor privacy reviews, and ongoing privacy governance activities. Acting as a trusted advisor to business teams, you will apply sound judgment and risk-based decision making to help teams navigate complex privacy requirements while balancing business objectives, customer expectations, and regulatory obligations.

Success in this role requires strong discernment, attention to detail, and the ability to influence outcomes across a diverse stakeholder landscape. The ideal candidate excels at translating privacy requirements into practical business solutions, identifying and mitigating risk, and fostering accountability for responsible data practices throughout the organization. This role is ideal for someone who is passionate about shaping how privacy is operationalized at scale, connecting people, processes, and technology to strengthen trust, enable innovation, and advance Hallmark's commitment to protecting consumer data.

Lead Privacy Risk, Compliance & Assessment Activities

• Lead Privacy Assessments (PAs), Privacy Impact Assessments (PIAs), and other privacy reviews for products, technologies, vendors, and business processes.
• Serve as a key privacy stakeholder in third-party risk management activities, partnering with Legal, Procurement, and Information Security.
• Maintain oversight of privacy risks, remediation plans, and compliance obligations across the enterprise.
• Monitor evolving privacy laws and regulations, translating requirements into actionable business guidance and operational controls.
• Lead the coordination of audits, regulatory inquiries, and compliance reviews, driving timely remediation and ensuring identified privacy risks are addressed effectively.

Own Privacy Governance & Program Operations

• Drive the execution, governance, and continuous improvement of Hallmark's enterprise privacy program.
• Partner across Legal, Information Security, Information Technology, Procurement, Marketing, Product, Media, Data & Analytics, and other business functions to embed privacy into business operations.
• Lead Privacy Council operations, including governance decisions, action planning, and accountability tracking.
• Maintain privacy policies, standards, procedures, operating practices, and governance documentation.
• Develop privacy scorecards, metrics, and executive reporting that provide visibility into program health, risks, and performance.

Steward Data Governance & Privacy Transparency

• Govern records of processing activities, data inventories, data maps, and related privacy documentation within OneTrust.
• Partner with business leaders, application owners, and data stewards to maintain an accurate understanding of how personal information is collected, used, shared, retained, and protected.
• Ensure privacy records, controls, and governance processes evolve as new products, technologies, vendors, and business capabilities are introduced.

Own Data Subject Rights Operations

• Administer and continuously improve Hallmark's Data Subject Access Request (DSAR) and consumer rights processes.
• Direct cross-functional efforts to identify, validate, collect, and deliver responsive information within regulatory timeframes.
• Monitor volumes, trends, performance metrics, and compliance obligations to ensure a scalable and effective consumer rights program.

Advance Privacy Awareness & Incident Response

• Promote privacy awareness and responsible data stewardship throughout the organization.
• Develop practical guidance and communications that help teams make informed privacy decisions.
• Support the governance, investigation, documentation, and remediation of privacy incidents and data breaches.

Success in this role requires leadership through influence, strong judgment, and the ability to drive outcomes across a highly matrixed organization.

You Will

• Exercise sound judgment and a risk-based approach when evaluating privacy issues and business decisions.
• Build trusted partnerships across Legal, Security, Technology, Analytics, and business teams.
• Drive accountability and execution across cross-functional initiatives.
• Communicate complex privacy requirements in clear, practical business terms.
• Balance regulatory obligations, business objectives, and consumer trust. Continuously identify opportunities to strengthen privacy controls, governance processes, and operational effectiveness.

Basic Qualifications

The following are required to be considered for this role:

• Bachelor's degree or 4 years of professional work experience.
• At least 10 years of experience in data, analytics, data management, data governance, information management, compliance, risk management, or related disciplines.
• At least 3 years of experience supporting or leading data privacy, compliance, privacy governance, privacy-by-design, data governance, or regulatory initiatives.
• Experience managing projects or programs, including developing action plans, coordinating work across multiple stakeholders, tracking deliverables, and meeting established deadlines.
• Experience leading cross-functional governance, compliance, operational, or transformation initiatives that require driving accountability, managing remediation activities, and influencing outcomes across multiple stakeholder groups.
• Experience documenting and analyzing data flows, system integrations, records of processing activities (ROPA), data maps, and the lifecycle of personal information across business processes and technology systems.
• Ability to translate legal, regulatory, and policy requirements into practical business actions, operational controls, and process improvements.
• Experience analyzing data, managing projects and priorities, resolving complex issues, and communicating with both technical and non-technical stakeholders.

Preferred Qualifications

Your resume will stand out if you have the following:

• Bachelor's degree in Data Analytics, Information Systems, Computer Science, Business Analytics, Management Information Systems, or a related data, technology, or business discipline.
• Experience with OneTrust, including Data Mapping, Data Subject Rights (DSAR), Assessment Automation, and related privacy governance modules.
• Experience supporting Privacy Impact Assessments (PIAs), Privacy Assessments (PAs), vendor privacy reviews, privacy-by-design initiatives, or enterprise compliance programs.
• Professional privacy certifications such as CIPP/US, CIPM, CIPT, or equivalent.
• Experience with privacy governance frameworks, records of processing activities, data inventories, consent management, or enterprise data governance programs.
• Experience working with modern data platforms and ecosystems, including cloud data platforms, customer data platforms (CDPs), data warehouses, or data governance technologies.
• Familiarity with privacy and governance technologies such as OneTrust, TrustArc, BigID, Collibra, Alation, or related platforms.
• Experience in retail, consumer products, media, entertainment, subscription businesses, or other data-intensive and consumer-focused industries.

Additional Details

• This is a U.S.-based remote role.* We're committed to creating a connected, collaborative culture, no matter where you are. You'll have access to virtual tools, team support, and opportunities to engage and grow with us. *Due to state-specific benefits regulations, Hallmark cannot consider candidates for remote positions who reside in Alaska, Hawaii, or Puerto Rico, or any country outside of the United States. If based in Kansas City, this position offers a hybrid work arrangement, giving you the best of both worlds: collaborating in person at Hallmark Headquarters in Kansas City, MO and enjoying the flexibility of working remote. Some meetings required in-person