Manager, Data Privacy

Auto req ID: 59585 Title: Manager, Data Privacy Job Function: Information Technology Location: JUNEAU Workplace Category: Onsite Company: Harley-Davidson Motor Company Full or Part-Time: Full Time Shift: SHIFT1 In 1903, out of a small shed in Milwaukee, Wisconsin, four young men lit a cultural wildfire that would grow and spread across geographies and generations. Their innovation and imagination for what was possible on two wheels sparked a transportation revolution that would make Harley-Davidson the most recognizable motorcycle brand in the world. Today, we continue to define motorcycle culture, evoking soul-stirring emotion reflected in every product and experience we deliver - like we have for well over a century and will for generations to come. Are you ready to ride with us? Harley-Davidson Motor Company, founded in a humble Milwaukee backyard shed in 1903, still calls the city home. Today, its Corporate Campus includes a 4.8-acre public park—a welcoming greenspace open to all. Join our team as a Mgr Data Privacy. Job Summary The Manager of Harley-Davidson, Inc’s Data Privacy reports to the Data Privacy Officer and leads Harley-Davidson’s global data privacy office. These functions help monitor and oversee privacy compliance in key business areas and reduce privacy, end-user, and reputational risk to our Brands related to how we handle Privacy Restricted information we hold on our employees, customers, and dealers. These teams are responsible for building and enhancing our workforce's knowledge to ensure proper security and privacy measures exist, and processes are followed when handling Privacy Restricted information throughout the data lifecycle. The Manager, Data Privacy is responsible for building functional roadmaps and strategies aligned with industry-leading frameworks to integrate data privacy functions. This position is directly responsible for monitoring and governing data privacy compliance, including privacy training and awareness programs related to GIS security standards and best practices, as well as global privacy compliance across all relevant business practices and initiatives. Job Responsibilities Partner with the Data Privacy Officer to build the HDI Data Privacy strategy and framework, based on industry-recognized standards, to align operational work, business assessment activities, compliance gaps, and privacy risk mitigation efforts. Translate US domestic and International Legal guidance and regulatory requirements into policies, standards, and control expectations, ensuring clear articulation of compliance requirements for first-line teams. Provide oversight and maintain existing governance frameworks and standards for core privacy program areas, including: Data subject rights (DSAR) processes and Service Level Agreements (SLA) Data protection impact assessment (PIA) governance and documentation standards Consent and preference management expectations Data retention and deletion requirements Work with functional business leaders to conduct PIAs on key business processes involving privacy-regulated data we collect and hold on employees, customers, and dealers; assess privacy risk and prioritize gaps; provide senior business leaders with privacy risk reports and recommendations for remediation; develop a global Privacy Breach Notification Process that meets all privacy regulatory requirements/restrictions Build and maintain strong business partnerships across key areas at a senior leadership level, bridging their understanding of data privacy concepts and requirements with an understanding of regional and global business practices Manage and facilitate a secured process for all HR/Legal/Ethics Privacy-related Investigations Manage and maintain our customer-facing Privacy Notice, Consent Language, and Cookie Usage Policy Ensure all employee, customer, and regulatory inquiries and complaints are addressed in a compliant and timely manner Drive a dynamic and multi-faceted global Data Privacy Awareness Training program for employees and contractors to heighten awareness and reduce security/privacy risk due to human error; drive campaigns to test business behavior and track end-user knowledge to drive ongoing program content and effectiveness Education Requirements High School Diploma or Equivalent Required Education Specifications Bachelor's Degree in business management, information systems, or a related discipline CIPP/US certification Master's Degree in related field is Preferred CIPP/EU or CIPM certification is Preferred Experience Requirements Required Typically requires a minimum of 8 years of related experience. 8+ years of relevant professional experience directly related to data privacy, audit and compliance, or information security Demonstrated experience working in an enterprise-level Data Privacy Office with global accountabilities. Direct experience leading Privacy Impact Assessments with business leaders and managers. Possess comprehensive knowledge and understanding of the primary data privacy principles and key industry-leading regulations such as: California Consumer Privacy Act (CCPA) European General Data Protection Regulation (GDPR) Proven ability to address privacy issues, incidents and inquiries from data subjects and to respond to them with a high degree of certainty and comprehension. Ability to define and establish comprehensive procedures that integrate with key business processes to ensure privacy standards and best practices are part of privacy compliance by design Excellent communication and presentation skills with demonstrated skill in presenting complex detail around regulations clearly and to a variety of audience members Proven ability to develop frameworks, strategies and roadmaps and to provide direction across all areas of accountability as well as to work closely with the Corporate Information Security Office (CISO) organization where dependencies exist Strong leadership, organization, communication, and process management skills; ability to lead and manage high performing teams, and an ability to develop a continuous improvement mentality in all operational activities Preferred Experience in building and leading a team with a proven ability in developing capabilities, attracting and retaining a core team of collaborative professionals and creating an organization viewed as a highly attractive place to work. Experience in delivering privacy awareness presentations or training modules/content for a global audience The pay range shown represents the national average pay range for this role. Your pay may be more or less than the stated range and is dependent on your geographic location and level of experience. We offer an inclusive compensation package for all full-time salaried employees including, but not limited to, annual bonus programs, health insurance benefits, a 401k program, onsite fitness centers and employee stores, employee discounts on products and accessories, and more. Learn more about Harley-Davidson here . Applicants must be currently authorized to work in the United States. Direct Reports: Yes Travel Required: 0 - 10% Pay Range: $129,900 - $207,800 Visa Sponsorship: This position is not eligible for visa sponsorship or visa transfer Relocation: This position is eligible for domestic relocation assistance (within posted country) Nearest Major Market: Milwaukee Job Segment: Compliance, Data Management, Information Security, GIS, Law, Legal, Data, Technology