FTC Data Privacy Lead

Remote

Contract (2 months 4 days)

Published 15 hours ago

stakeholder management

data governance

risk management

master data management

metadata management

data mapping

Data Privacy Management

We are seeking a Grade D Data Privacy & AI Governance Expert to shape and lead enterprise privacy, data governance and responsible AI transformations. The role translates FTC obligations, privacy commitments and related U.S. requirements into practical operating models, platform-enabled controls and audit-ready evidence. This leader will use AI and agentic capabilities to accelerate governance while establishing the policies, accountable ownership, technical controls and human oversight required to govern AI systems and autonomous agents responsibly.

Your role:

-

Advise CDO, CIO, CTO, Legal, Privacy, Risk, Security, Compliance and business leaders; lead executive workshops and convert ambiguous obligations into strategies, roadmaps, architectures, investment choices and measurable outcomes.

-

Lead FTC-aligned privacy and data-protection assessments covering data inventories and flows, privacy notices and commitments, consent and preference management, collection and purpose limitation, sensitive data, retention and deletion, access controls, third parties, incident response, monitoring and substantiation of claims.

-

Design privacy-by-design and governance operating models, decision rights, policies, standards, controls, RACI models, escalation paths, evidence requirements, KPIs and remediation portfolios across complex global environments.

-

Lead platform evaluation, architecture, implementation assurance and integration across data catalogs, privacy management, lineage, data quality, MDM, observability, GRC, cloud and AI governance capabilities.

-

Own solution quality, design authority, delivery risk, executive communications and stakeholder alignment; mentor practitioners and create reusable organization methods, accelerators and thought leadership.

FTC, privacy and regulatory capabilities:

-

Deep understanding of the FTC Act’s unfair or deceptive practices standard and practical application to privacy, security, advertising and AI-related representations; ability to translate enforcement themes, consent orders and business guidance into control objectives and evidence.

-

Working knowledge of relevant U.S. privacy and sector obligations, including state comprehensive privacy laws, COPPA, FCRA, GLBA Safeguards, Health Breach Notification and breach-response requirements, with the judgment to engage legal counsel for formal interpretation.

-

Experience with privacy program operations: records of processing, data mapping, DPIAs/PIAs, rights requests, consent, cookies and tracking, vendor risk, retention, deletion, de-identification, incident readiness, training, metrics, control testing and audit support.

AI for governance | Governance for AI:

-

GenAI and agents to discover and classify data, enrich metadata, map obligations to policies and controls, draft privacy assessments, recommend quality rules, triage issues, collect evidence and continuously monitor control performance.

-

Design progressive autonomy with confidence thresholds, least privilege, human-in-the-loop or human-on-the-loop approvals, segregation of duties, exception routing, traceability, observability, rollback and named accountability.

-

Operationalize AI governance across use-case intake, risk tiering, data and RAG readiness, model and agent inventory, privacy and security review, evaluation, deployment gates, monitoring, incidents, recertification, retirement and third parties.

-

Address training-data and prompt privacy, confidential-data use, provenance, purpose limitation, data minimization, output risks, bias, explainability, agent identity, tool permissions, prompt injection, data leakage, unsafe action and cascading failures.

Data privacy & AI governance expert:

Data governance and privacy platform expertise

-

Architecture and implementation knowledge across several leading platforms such as OneTrust, BigID, Securiti, TrustArc, Informatica IDMC/CDGC, Collibra, Alation, Ataccama, Atlan, Microsoft Purview, IBM watsonx.governance, Databricks Unity Catalog and comparable cloud-native governance, privacy, quality, MDM and AI governance services.

-

Ability to compare capabilities without platform bias and design interoperable patterns for metadata, lineage, classification, consent, rights, retention, policy enforcement, risk and control mapping, workflow, evidence and reporting.

-

Integration experience across multi-cloud, lakehouse, warehouse, ERP, CRM, SaaS, MDM and on-premises landscapes using APIs, events, batch, semantic layers, knowledge graphs, policy-as-code and governed agent tool access.

Required experience and capabilities

-

Typically 10+ years in privacy, data governance, risk, compliance, data management, architecture or consulting, including leadership of complex enterprise programs and multiple implementation lifecycles.

-

Demonstrated success operationalizing privacy obligations and commitments through processes, controls, technology and evidence; experience supporting regulatory readiness, investigations, audits or remediation is strongly preferred.

-

Hands-on credibility with data governance and privacy platforms, data architectures and AI lifecycle controls; working knowledge of RAG, agent orchestration, MCP/tool use, semantic models, knowledge graphs, evaluation and monitoring.

-

Executive communication, consulting, facilitation, negotiation, proposal shaping, estimation, delivery governance and leadership across legal, business, security, data, cloud and AI teams.

-

Bachelor’s degree in Law, Privacy, Cybersecurity, Computer Science, Information Systems, Engineering, Data Science, Business or a related discipline, or equivalent relevant experience. J.D. is valued for legal-advisory backgrounds but is not required for this consulting role.

Grade D leadership expectations:

-

Design and govern complete enterprise solutions connecting business, information, applications, technology, security, privacy, AI, people, process and operating-model decisions.

-

Operate as a trusted senior advisor and workstream or architecture lead; turn uncertainty into clear options, decisions, accountable plans and measurable value while balancing innovation, control, speed, cost and risk.

-

Build organization's capability through delivery excellence, reusable assets, coaching, quality reviews, alliances, market development and evidence-based thought leadership.

Preferred certifications and credentials

-

Privacy: IAPP CIPP/US plus CIPM; CIPT for privacy engineering; Fellow of Information Privacy (FIP) for candidates meeting IAPP requirements.

-

AI governance and management systems: IAPP AIGP; ISO/IEC 42001 Lead Implementer or Lead Auditor; relevant ISACA AI, risk or controls credentials.

-

Data governance and architecture: DAMA CDMP, EDM Council DCAM, TOGAF Enterprise Architecture Practitioner and company IAF certification or current equivalent.

-

Platform credentials from OneTrust, BigID, Securiti, Informatica, Collibra, Alation, Ataccama, Microsoft, Databricks or IBM; CIPP/E, CISA, CRISC, CISM or CISSP are beneficial when supported by relevant experience.

Success measures and suggested interview evidence:

-

Privacy commitments and regulatory obligations are traceable to controls, owners, systems and evidence; high-risk gaps move to closure and audit readiness improves against agreed baselines.

-

Governance processes are adopted, platform capabilities are used, evidence is reliable, AI risks are monitored and stakeholder confidence improves.

-

Candidate presents two enterprise privacy or governance engagements and designs an agent-enabled privacy workflow showing inputs, decisions, controls, approvals, evidence, monitoring, exceptions and rollback.

The pay range that the employer in good faith reasonably expects to pay for this position is $60.10/hour - $93.90/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.