Data Privacy, Cybersecurity & AI Compliance Manager

Austin, Texas, United States;
Dallas, Texas, United States;
Morristown, New Jersey, United States

Title :
Data Privacy, Cybersecurity & AI Compliance Manager

Location :
Austin, TX / Dallas, TX / Morristown, NJ (Hybrid)

Reporting to :
Sr. Enterprise Compliance Director

Hippo was built on apromise:make home ownership effortless.

Nearly adecade later, thatmissionstill drives us.

Weuse technologyanddatato helpour customers stay ahead ofproblemsandprotect what matters most.

Today, that sametech-native approach powers our work beyond homeowners.

Hippooperatesas a diversifiedcarrierplatform, partnering with MGAs to deliver tailored program solutions that help them grow and deliver better customer experiences.

Behind that work is a team that values ownership, curiosity, collaboration, and continuous improvement.

Ifyou'reenergized by building what'snext,we'dlove to meet you.

You are a compliance professional who lives at the intersection of data privacy, cybersecurity, and AI governance. You're not necessarily an attorney, but you know how to translate complex regulatory requirements into practical, operational compliance programs, and you know when an issue needs to go to Legal for interpretation or sign-off. You've built or matured compliance programs against frameworks like the CCPA/CPRA and other state privacy laws, the TCPA and related marketing rules, the NYDFS Cybersecurity Regulation (23 NYCRR 500), the NAIC Insurance Data Security Model Law, and emerging AI regulations (e.g., Colorado AI Act, EU AI Act, NAIC AI model bulletins).

You're as comfortable running day-to-day privacy operations, working a live security incident alongside Info Sec, or writing a quarterly report for a board committee as you are designing the program those activities live in. Insurance industry experience is a strong plus, since you understand the regulatory overlay carriers and producers face beyond standard corporate compliance. You're detail-oriented, comfortable managing multiple regulatory threads at once, and skilled at partnering across Legal, Security, Engineering, Marketing, and the business to keep Hippo ahead of a fast-moving regulatory landscape.

• Privacy Program Build & Ownership: Design, build, and run Hippo's enterprise data privacy compliance program, maturing it from today's operational footing into a documented, auditable program: governance and accountability structure, data inventory and records of processing, privacy impact assessment process, policy framework, program metrics, and a regulatory change management process covering CCPA/CPRA, other state privacy laws, and insurance-specific privacy requirements (e.g., GLBA and state insurance privacy laws)
• Privacy Operations & Consumer Rights: Own Hippo's privacy mailbox and consumer rights request process end to end: intake, verification, tracking, and timely response to access, deletion, correction, and opt-out requests, with documentation sufficient to withstand regulatory scrutiny
• Cybersecurity Regulatory Compliance: Support compliance with insurance-specific cybersecurity regulations (NYDFS 23 NYCRR 500, NAIC Insurance Data Security Model Law and state adoptions) and general frameworks (e.g., NIST); support annual certifications, risk assessments, and regulatory exams and audits, and maintain required documentation
• Cyber Event Handling: Partner with Information Security on the triage, investigation, containment, and resolution of cyber events; own the compliance workstream for each event, including documentation, materiality and notification analysis support (state breach statutes, NYDFS 72‑hour reporting), and remediation tracking, escalating legal determinations to…