Description
This role is responsible for providing strategic privacy advisory, guidance, and program management support to HP's Products & Services organizations to ensure compliance with global privacy, data protection, AI governance, and regulatory requirements.
The role partners closely with product, engineering, legal, security, data governance, and business teams to embed privacy-by-design principles throughout the product lifecycle, assess privacy risks, and drive implementation of compliant solutions that enable innovation while protecting customer, employee, and partner data.
Responsibilities
- Manage and lead privacy programs supporting HP Products & Services teams to ensure compliance with global privacy and data protection regulations, including GDPR, CCPA/CPRA, LGPD, PIPL, and other applicable international requirements.
- Serve as a trusted privacy advisor for product, service, software, AI/ML, cloud, and digital platform initiatives by providing practical guidance throughout the development lifecycle.
- Conduct and facilitate Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), AI risk assessments, and related reviews to identify and mitigate privacy risks.
- Partner with business, engineering, legal, cybersecurity, data governance, and compliance stakeholders to integrate privacy-by-design and privacy-by-default principles into products and services.
- Develop project plans, milestones, implementation roadmaps, and resource strategies to support privacy compliance initiatives and regulatory readiness efforts.
- Monitor progress of privacy-related projects and activities, escalating risks, dependencies, and issues while driving timely resolution.
- Analyze evolving regulatory requirements and translate legal and policy obligations into actionable business and technical requirements.
- Develop and maintain privacy standards, guidance documentation, training materials, playbooks, and operating procedures.
- Support regulatory change management efforts by evaluating new laws, industry requirements, and organizational impacts.
- Identify, assess, and communicate privacy, compliance, and data governance risks to stakeholders and leadership, including recommended mitigation plans.
- Support cross-functional reviews involving data collection, sharing, transfers, retention, consent, user rights, AI systems, and third-party integrations.
- Drive continuous improvement of privacy intake processes, assessment methodologies, governance frameworks, metrics, and operational efficiencies.
- Track and report privacy program KPIs, compliance status, and risk trends to leadership and executive stakeholders.
- Collaborate with product and engineering teams to evaluate new technologies, data uses, AI capabilities, and innovative solutions from a privacy and compliance perspective.
- Provide coaching, mentorship, and subject matter expertise to less experienced privacy professionals and cross-functional partners.
Education & Experience
- Four-year or Graduate Degree in Law, Public Policy, Information Systems, Information Security, Computer Science, Business Administration, Data Governance, or a related discipline, or equivalent experience.
- Typically, 5-8 years of experience in privacy, compliance, risk management, data governance, product management, program management, or a related field.
- Experience supporting software, cloud, digital services, data transfers, AI/ML products, or technology organizations.
- Experience managing complex cross-functional initiatives involving multiple stakeholders and competing priorities.
- Experience interpreting and operationalizing privacy and data protection requirements within large global organizations.
Benefits
- Health insurance
- Dental insurance
- Vision insurance
- Long term/short term disability insurance
- Employee assistance program
- Flexible spending account
- Life insurance
- Generous time off policies, including:
- 4-12 weeks fully paid parental leave based on tenure
- 11 paid holidays
- Additional flexible paid vacation and sick leave