VP, Privacy

• Privacy Strategy & Governance: Define and execute a comprehensive privacy strategy aligned with business goals, regulatory requirements, and industry best practices.
• Regulatory Compliance: Responsible for compliance with global privacy laws (e.g., SEC Regulation S‑P, GLBA, CCPA/CPRA, GDPR, PIPEDA, state-level privacy laws), including AI tools, models, and workflows. Monitor regulatory changes and lead organizational readiness.
• Policy Development: Create, maintain, and enforce privacy policies, standards, and data-handling procedures across the enterprise, and develop and report on compliance metrics.
• Risk Management: Lead privacy risk assessments, DPIAs, vendor risk reviews, and audits. Identify gaps and drive remediation.
• AI Policies and controls: Develop and implement AI‑specific data‑handling policies and controls, including rules for input restrictions, redaction, anonymization, retention, and secure storage of AI‑generated or AI‑processed data, as well as controls for access management, monitoring, and employee training on safe and compliant AI usage.
• Data Protection Operations: Oversee processes for data subject rights, consent management, data retention and deletion, breach response, privacy-by-design, and use of data in AI.
• Incident Response Leadership: Assist in managing response to privacy incidents, coordinating with security and communications teams.
• Cross-Functional Collaboration: Partner with Compliance, Technology, the People Team, and Marketing to embed privacy into systems, products, and workflows.

• 10+ years of experience in privacy, data protection, compliance, cybersecurity, or related fields.
• Deep knowledge of global privacy regulations and frameworks (GDPR, CCPA/CPRA, NIST Privacy Framework, ISO 27701).
• Proven leadership experience building or scaling privacy programs.
• Strong understanding of data governance, information security, and risk management.
• Exceptional communication skills with the ability to influence at all levels.
• J.D. from an accredited law school is highly preferred.
• Certifications such as CIPP/E, CIPP/US, CIPM, CIPT, or equivalent are highly preferred.

• Strategic thinker with the ability to balance risk, compliance, and business needs.
• Experience working in highly regulated industries (healthcare, finance, technology, government).
• Ability to translate complex legal and technical concepts into clear business guidance.
• Strong crisis management and incident response capabilities.
• Demonstrated success leading cross-functional teams.

This professional role requires availability during standard business hours of Monday through Friday from 8AM to 5PM.  At times, the role may have early or late hours to meet business tasks and deadlines for external and internal client needs.    

All roles classified as a non-exempt are required to record working time into the timekeeping system daily at the start and end of each workday plus a 30-minute unpaid lunch period.

This position may be in a professional office environment or a dedicated home office workspace which is free of interruptions.  Whether position is in a dedicated office space or home office workspace, basic technology needs will be provided to satisfy position requirements.  Routinely sitting and standing for periods of time. No heavy lifting over 10 lbs.

Application Deadline: The initial deadline for applications is 8/3/2026. Applications submitted after this date may still be considered on a rolling basis until the position/program is filled. We encourage all interested candidates to apply as early as possible. If a final decision has not been made by the initial deadline, subsequent applications will be reviewed as they are received.

Mercer Advisors is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by applicable federal, state, or local law. Mercer Advisors participates in E-Verify and complies with federal employment eligibility verification requirements.

If you need an accommodation during the application or hiring process, please email PeopleTeam@merceradvisors.com. This inbox is for accommodation requests only.

For information about applicant rights, required employment notices, E-Verify participation, and state specific disclosures, please review our Applicant Notices and Employment Rights.

If you are a resident of California, learn more about Mercer's California Consumer Privacy Policy here.
CCPA Notice at Collection