FTC Data Privacy Lead

Role Purpose

Seeking a Grade D Data Privacy & AI Governance Expert to shape and lead enterprise privacy, data governance and responsible AI transformations. The role translates FTC obligations, privacy commitments, and related U.S. requirements into practical operating models, platform-enabled controls, and audit-ready evidence. This leader will use AI and agentic capabilities to accelerate governance while establishing the policies, accountable ownership, technical controls, and human oversight required to govern AI systems and autonomous agents responsibly.

Your Role

• Advise CDO, CIO, CTO, Legal, Privacy, Risk, Security, Compliance, and business leaders; lead executive workshops and convert ambiguous obligations into strategies, roadmaps, architectures, investment choices, and measurable outcomes.
• Lead FTC-aligned privacy and data-protection assessments covering data inventories and flows, privacy notices and commitments, consent and preference management, collection and purpose limitation, sensitive data, retention and deletion, access controls, third parties, incident response, monitoring, and substantiation of claims.
• Design privacy-by-design and governance operating models, decision rights, policies, standards, controls, RACI models, escalation paths, evidence requirements, KPIs, and remediation portfolios across complex global environments.
• Lead platform evaluation, architecture, implementation assurance, and integration across data catalogs, privacy management, lineage, data quality, MDM, observability, GRC, cloud, and AI governance capabilities.
• Own solution quality, design authority, delivery risk, executive communications, and stakeholder alignment; mentor practitioners and create reusable *** methods, accelerators, and thought leadership.

FTC, Privacy, and Regulatory Capabilities

• Deep understanding of the FTC Act’s unfair or deceptive practices standard and practical application to privacy, security, advertising, and AI-related representations; ability to translate enforcement themes, consent orders, and business guidance into control objectives and evidence.
• Working knowledge of relevant U.S. privacy and sector obligations, including state comprehensive privacy laws, COPPA, FCRA, GLBA Safeguards, Health Breach Notification, and breach-response requirements, with the judgment to engage legal counsel for formal interpretation.
• Experience with privacy program operations: records of processing, data mapping, DPIAs/PIAs, rights requests, consent, cookies and tracking, vendor risk, retention, deletion, de-identification, incident readiness, training, metrics, control testing, and audit support.

AI for Governance | Governance for AI

• Apply GenAI and agents to Client and classify data, enrich metadata, map obligations to policies and controls, draft privacy assessments, recommend quality rules, triage issues, collect evidence, and continuously monitor control performance.
• Design progressive autonomy with confidence thresholds, least privilege, human-in-the-loop or human-on-the-loop approvals, segregation of duties, exception routing, traceability, observability, rollback, and named accountability.
• Operationalize AI governance across use-case intake, risk tiering, data and RAG readiness, model and agent inventory, privacy and security review, evaluation, deployment gates, monitoring, incidents, recertification, retirement, and third parties.
• Address training-data and prompt privacy, confidential-data use, provenance, purpose limitation, data minimization, output risks, bias, explainability, agent identity, tool permissions, prompt injection, data leakage, unsafe action, and cascading failures.

Data Privacy & AI Governance Expert

Data Governance and Privacy Platform Expertise

• Architecture and implementation knowledge across several leading platforms such as OneTrust, BigID, Securiti, TrustArc, Informatica IDMC/CD Collibra, Alation, Ataccama, Atlan, Microsoft Purview, IBM watsonx.governance, Databricks Unity Catalog, and comparable cloud-native governance, privacy, quality, MDM, and AI governance services.
• Ability to compare capabilities without platform bias and design interoperable patterns for metadata, lineage, classification, consent, rights, retention, policy enforcement, risk and control mapping, workflow, evidence, and reporting.
• Integration experience across multi-cloud, lakehouse, warehouse, ERP, CRM, SaaS, MDM, and on-premises landscapes using APIs, events, batch, semantic layers, knowledge graphs, policy-as-code, and governed agent tool access.

Required Experience and Capabilities

• Typically 10 years in privacy, data governance, risk, compliance, data management, architecture, or consulting, including leadership of complex enterprise programs and multiple implementation lifecycles.
• Demonstrated success operationalizing privacy obligations and commitments through processes, controls, technology, and evidence; experience supporting regulatory readiness, investigations, audits, or remediation is strongly preferred.
• Hands-on credibility with data governance and privacy platforms, data architectures, and AI lifecycle controls; working knowledge of RAG, agent orchestration, MCP/tool use, semantic models, knowledge graphs, evaluation, and monitoring.
• Executive communication, consulting, facilitation, negotiation, proposal shaping, estimation, delivery governance, and leadership across legal, business, security, data, cloud, and AI teams.
• Bachelor’s degree in Law, Privacy, Cybersecurity, Computer Science, Information Systems, Engineering, Data Science, Business or a related discipline, or equivalent relevant experience. J.D. is valued for legal-advisory backgrounds but is not required for this consulting role.