Privacy Program Lead: Data Privacy & Risk Management

H&R Block, Inc.; Kansas City (MO); On-site; USD 150,000 - 210,000; Full time

Job summary

H&R Block, Inc. is seeking a senior privacy program leader to guide the program strategy, governance, and risk management across small business services.

You will work with Legal, Technology, Information Security, Compliance, and operations teams to operationalize privacy requirements while educating associates and promoting a privacy-minded culture. You will manage budgets, deliver metrics, and drive privacy-by-design in products and processes, including vendor oversight, data mapping, and

Qualifications

• Bachelor’s degree in a related field and extensive privacy/privacy governance background.
• Experience leading privacy programs across business services and technology.
• Strong communication, project leadership, and cross‑functional collaboration.

Responsibilities

• Define and execute the Privacy Program strategy, roadmap, and priorities.
• Maintain privacy policies, procedures, standards, and training materials.
• Lead risk mitigation for collection, storage, use, and disclosure of data.
• Oversee privacy impact assessments and vendor privacy reviews.
• Coordinate incident response and regulatory communications as needed.
• Embed privacy-by-design in products, analytics, and data governance.
• Develop metrics, monitor KPIs, and report to leadership.

Skills

Privacy program management

Project management

Stakeholder influence

Policy & training development

Risk assessment

Communication skills

Education

Bachelor’s degree in a related field

10+ years privacy/IP security experience

Job description

H&R Block, Inc. is seeking a senior privacy program leader to guide the program strategy, governance, and risk management across small business services.

You will work with Legal, Technology, Information Security, Compliance, and operations teams to operationalize privacy requirements while educating associates and promoting a privacy-minded culture. You will manage budgets, deliver metrics, and drive privacy-by-design in products and processes, including vendor oversight, data mapping, and