Director, Privacy

About Rivian

Rivian is on a mission to keep the world adventurous forever. This goes for the emissions‑free Electric Adventure Vehicles we build, and the curious, courageous souls we seek to attract.

As a company, we constantly challenge what's possible, never simply accepting what has always been done. We reframe old problems, seek new solutions and operate comfortably in areas that are unknown. Our backgrounds are diverse, but our team shares a love of the outdoors and a desire to protect it for future generations.

Role Summary

We’re looking for an experienced and highly motivated individual to lead the operations for Rivian’s data privacy program. You’ll be responsible for all operational aspects of customer and employee privacy, managing customer disclosures, performing risk and compliance reviews of privacy initiatives, addressing customer inquiries, and conducting compliance reviews.

Responsibilities

The Director, Privacy will manage and continue to scale Rivian’s privacy operations worldwide. This individual will interface directly with corporate and operational leadership to develop, implement, maintain, and ensure a best‑in‑class data privacy programs.

Program Leadership & Governance

• Lead and continuously scale Rivian’s privacy operations worldwide, partnering with corporate and operational leadership to maintain a best‑in‑class privacy program.
• Manage Rivian’s privacy policies, procedures, controls, documentation, and guidance in consultation with the Privacy, Cybersecurity, and AI Legal teams.
• Manage Privacy Steering Committee operations and serve as a member of cross‑functional governance bodies such as Third‑Party Risk Management and Cybersecurity Committees.
• Update and maintain the Record of Processing Activities (RoPA) to ensure ongoing compliance with global privacy regulations.

Training, Awareness & Culture

• Develop and deliver privacy training and awareness programs, including foundational training, role‑based modules, and periodic events.
• Actively promote the importance of data privacy across the organization via the Rivian Privacy Champions program and direct engagement with product and functional teams.

Product, Services & Customer Experience

• Lead privacy reviews for new and changed products and services; prepare privacy impact assessments/data protection impact assessments together with business teams.
• Advise on privacy disclosures and customer choices in Rivian vehicles, apps, and digital products.
• Coordinate with teams managing Rivian website content with privacy implications (cookies, Privacy Hub, customer support articles).

Rights Requests, Inquiries & Operations

• Manage privacy rights request processes and tooling consistent with legal requirements and industry best practices.
• Work closely with Rivian’s Customer Support team to receive, track, and respond to privacy‑related inquiries efficiently and consistently.

Compliance, Metrics & Tooling

• Manage privacy compliance reviews and build metrics, dashboards, and reporting for senior management.
• Pursue opportunities to leverage AI systems and other advanced tools to improve privacy compliance operations.
• Drive the effective use of privacy tools (e.g., Ketch), data platforms (e.g., Databricks), and project/reporting systems to enable scalable, data‑driven privacy operations.

Cross‑Functional Partnership

• Work closely with Cybersecurity, Information Technology, Legal, the People Team, and other stakeholders to align on Rivian’s data privacy goals and implementation strategies.
• Serve as a trusted advisor to business leaders on privacy risk, trade‑offs, and implementation options.

Qualifications Required

• Minimum 10 years of proven privacy operational experience in multinational, complex, fast‑growing global organizations, preferably in technology or automotive. Experience must be focused on privacy operations and risk management (not solely information security, data governance, or research).
• Strong knowledge of applicable global data privacy laws and requirements
  , including CCPA/CPRA and GDPR
  , with the ability to identify emerging trends and evolving issues.
• Demonstrated experience authoring and managing data privacy policies, procedures, training, and…