Manager, Data Privacy

Auto req

Title:

Manager, Data Privacy
Job Function:

Information Technology

Location:

JUNEAU
Workplace Category:
Onsite
Company:

Harley-Davidson Motor Company
Full or Part-Time:

Full Time
Shift: SHIFT1

In 1903, out of a small shed in Milwaukee, Wisconsin, four young men lit a cultural wildfire that would grow and spread across geographies and generations. Their innovation and imagination for what was possible on two wheels sparked a transportation revolution that would make Harley-Davidson the most recognizable motorcycle brand in the world. Today, we continue to define motorcycle culture, evoking soul-stirring emotion reflected in every product and experience we deliver - like we have for well over a century and will for generations to come.

Are you ready to ride with us?

Harley-Davidson Motor Company, founded in a humble Milwaukee backyard shed in 1903, still calls the city home. Today, its Corporate Campus includes a 4.8-acre public park—a welcoming green space open to all. Join our team as aMgr Data Privacy.

The Manager of Harley-Davidson, Inc’s Data Privacy reports to the Data Privacy Officer and leads Harley-Davidson’s global data privacy office. These functions help monitor and oversee privacy compliance in key business areas and reduce privacy, end-user, and reputational risk to our Brands related to how we handle Privacy Restricted information we hold on our employees, customers, and dealers. These teams are responsible for building and enhancing our workforce's knowledge to ensure proper security and privacy measures exist, and processes are followed when handling Privacy Restricted information throughout the data lifecycle.

The Manager, Data Privacy is responsible for building functional roadmaps and strategies aligned with industry-leading frameworks to integrate data privacy functions. This position is directly responsible for monitoring and governing data privacy compliance, including privacy training and awareness programs related to GIS security standards and best practices, as well as global privacy compliance across all relevant business practices and initiatives.

• Partner with the Data Privacy Officer to build the HDI Data Privacy strategy and framework, based on industry-recognized standards, to align operational work, business assessment activities, compliance gaps, and privacy risk mitigation efforts.
• Translate US domestic and International Legal guidance and regulatory requirements into policies, standards, and control expectations, ensuring clear articulation of compliance requirements for first-line teams.
• Provide oversight and maintain existing governance frameworks and standards for core privacy program areas, including:
  • Data subject rights (DSAR) processes and Service Level Agreements (SLA)
  • Data protection impact assessment (PIA) governance and documentation standards
  • Consent and preference management expectations
  • Data retention and deletion requirements
• Work with functional business leaders to conduct PIAs on key business processes involving privacy-regulated data we collect and hold on employees, customers, and dealers; assess privacy risk and prioritize gaps; provide senior business leaders with privacy risk reports and recommendations for remediation; develop a global Privacy Breach Notification
• Process that meets all privacy regulatory requirements/restrictions
• Build and maintain strong business partnerships across key areas at a senior leadership level, bridging their understanding of data privacy concepts and requirements with an understanding of regional and global business practices
• Manage and facilitate a secured process for all HR/Legal/Ethics Privacy-related Investigations
• Ensure all employee, customer, and regulatory inquiries and complaints are addressed in a compliant and timely manner
• Drive a dynamic and multi-faceted global Data Privacy Awareness Training program for employees and contractors to heighten awareness and reduce security/privacy risk due to human error; drive campaigns to test business behavior and track end-user knowledge to drive ongoing program content and effectiveness

High School Diploma or Equivalent Required

• Bachelor's Degree in business management, information systems, or a related discipline
• CIPP/US certification
• Master's Degree in related field is Preferred
• CIPP/EU or CIPM certification is Preferred

Required

• Typically requires a minimum of 8 years of related experience.
• 8+ years of relevant professional experience directly related to data privacy, audit and compliance, or information security
• Demonstrated experience working in an enterprise-level Data Privacy Office with global accountabilities. Direct experience leading Privacy Impact Assessments with business leaders and managers.
• Possess comprehensive knowledge and understanding of the primary data privacy principles and key industry-leading regulations such as:
  • California Consumer Privacy Act (CCPA)
  • European General Data…