Senior Program Manager - Privacy & Responsible AI

We’re looking for problem solvers, innovators, and dreamers who are searching for anything but business as usual. Like us, you’re a high performer who’s an expert at your craft, constantly challenging the status quo. You value inclusivity and want to join a culture that empowers you to show up as your authentic self. You know that success hinges on commitment, that our differences make us stronger, and that the finish line is always sweeter when the whole team crosses together.

Responsible for tactical, operational management of all programs overseen by the Privacy and Product legal team to align with business priorities while ensuring compliance. The position will coordinate across senior-level business, engineering, IT, and system administration stakeholders to implement programmatic measures for a variety of initiatives, including, but not limited to, embedding data privacy and security by design and default, data governance and retention, and responsible AI into existing and future proprietary and enterprise systems. This role will navigate between strategic business objectives and systems/process concepts from the perspective of compliance with current and developing global regulations, governance, and industry best practices. Drives appropriate preventive, detective, and remedial controls for privacy risks across the organization as well as for evolving AI regulations. Assists with developing and executing data protection, governance, and data management initiatives for cross-functional teams. Regularly consults with enterprise stakeholders to develop strategies to minimize risk, carry out risk mitigation measures, and improve safeguards aimed at protecting information assets. Establishes and maintains mechanisms for assessing and demonstrating continuous improvement with key metrics for privacy compliance, data governance, and responsible AI. This role reports to the Vice President, Privacy and Product Counsel.

ESSENTIAL DUTIES AND RESPONSIBILITIES:            

• Supports the company’s privacy compliance measures through various tasks and responsibilities, including conducting privacy risk assessments, business process assessments, privacy incident management, and data subject access requests.
• Maintains inventory of enterprise AI use cases via the completion of AI Risk Assessments; assists business stakeholders with populating these assessments as needed.
• Communicates the company’s privacy and security compliance mechanisms, as well as responsible AI principles, data retention, and our position on usage data, in response to both customer requests and internal requests for data sharing.  
• Ensures alignment between the company´s global cybersecurity, privacy, responsible AI, and data management practices and initiatives.
• Develops and maintains mechanisms for complying with the GDPR’s Article 30 requirements for data processing logs and assists the business with documenting and updating such records on an annual basis.
• Develops and leads cross-functional initiatives to collect and maintain an inventory of all internal tools and systems and assigns relevant assessments to business teams where appropriate; flags risks for high-impact systems that have not been approved by all appropriate assessment mechanisms.
• In collaboration with the Digital Marketing team, implements and oversees appropriate mechanisms for privacy and marketing compliance on the company’s websites and those of its third-party data processors and data brokers, including the use of cookie settings and consents, do-not-sell, opt-ins, webforms, and user preference centers. Regularly audits compliance with the requirements for such websites, data partners, webforms, and preference centers set forth by this role.
• Ensures adherence to appropriate data protection frameworks, regulatory requirements, and company policies. Aligns program initiatives to the NIST Privacy Framework and additional regulatory frameworks as requested by the business (e.g., FedRAMP, FIPS, HIPAA). Ensures compliance with the company’s responsible AI principles, governance mechanisms, and company policies on AI and aligns relevant program initiatives to the NIST Risk Management Framework and evolving AI regulations.
• Collaborates with teams in Legal, Information Security, and Information Technology to identify, document, and mitigate privacy and compliance risks through the implementation and maintenance of a centralized risk register. Develops and leads awareness mechanisms and initiatives aimed at addressing identified risks.
• Assists with maintaining and, where needed, developing internal or external facing documentation of privacy, security, product, and AI programs, including, but not limited to, AI Fact Sheets, SBOMs, third-party credits, and content housed on the company’s Trust webpage and Trust Center; develops and populates content for the Trust webpage and Trust Center as needed.
• Provides direction and creates awareness of key privacy and AI concepts for cross-functional initiatives; acts as a lead stakeholder in initiatives aimed at compliance with regulations and industry best practices, such as those pertaining to data retention, data use, appropriate access controls, and data governance.
• Maintains an inventory of third parties that handle personal data on behalf of the company (i.e., data processors) or supplies personal data to the company (i.e., data brokers), including the appropriate contractual obligations with such third parties, and supports due diligence reviews and periodic audits of vendors and partners for compliance with data protection obligations. Regularly develops and delivers targeted trainings and awareness campaigns aimed at educating the company about the team’s programs and initiatives, requirements pertaining to completion of assessments, risk mitigation measures, and the like. Develops and maintains materials aimed at enabling key functions to self-service common programmatic requirements (e.g., completion of AI Risk Assessments, vetting of data brokers), FAQs and one-pagers on privacy and AI topics, and other content pertaining to compliance with privacy, responsible AI, or data governance regulations, policies, and procedures.
• Develops and reports out metrics for the team, as needed, including the development of reports and dashboards.
• Participates in continued education on topics pertaining to the role, including privacy, AI, and data governance, and updates leadership on related risks and regulatory or industry developments.

• Lead, support, and enable initiatives, ensuring effective alignment between senior leadership and cross-functional teams in project planning and execution. Develops and maintains documentation of project risks, actions items, and resolutions as well as standard operating procedures moving forward.
• Track initiative and project progress, ensure deliverable accountability, monitor implementation, and provide regular updates to relevant stakeholders, including but not limited to, the company’s AI Governance Board, its Public Policy and Risk and Compliance Committees, and the Executive Leadership Team.
• Compensation 183,000-212,000 plus bonus+ equity

• Provide post-mitigation and implementation analyses to assess effectiveness and recommend improvements based on lessons learned. Where needed, lead cross-functional teams in identifying and documenting gap assessments or other post-incident debriefs. Performs other duties and projects as assigned.

ESSENTIAL KNOWLEDGE, SKILLS, AND ABILITIES:

• Demonstrates knowledge of, or quickly comes up to speed on, key privacy concepts and compliance obligations related to state, federal, and international privacy regulations and laws as they pertain to the company’s privacy program.
• Demonstrates knowledge of, or quickly comes up to speed on, key concepts pertaining to responsible AI and the regulatory landscape for development of AI technologies as well as the risks pertaining to internal use of enterprise AI.
• Effective, results-driven program and project management skills with the ability to manage multiple work streams across functions and teams.
• Technical and organizational skills and experience required to deploy and maintain records and data management tools and inventories as well to deploy data governance processes.
• Strong relationship-building, problem-solving, and collaboration skills and the ability to influence and communicate complex concepts to technical and non-technical staff.
• Demonstrates delivery of pragmatic, business-focused solutions.
• Advanced skills using the tools and applications necessary for successful completion of the role’s duties, including the Microsoft Office 360 suite of applications, such as Teams and SharePoint, Visio or other tools needed to create data flow maps, and project management tracking applications, such as Asana and Jira.
• Proven ability to successfully multi-task, remain responsive and agile to changes in business priorities, and to deliver pragmatic, risk-based recommendations to the business.
• Ability to create and deliver effective presentations to business teams and executive leadership, including, where required, leading meetings or speaking before large groups.
• Demonstrated resourcefulness and ability to work and manage time spent on projects independently and with little supervision while performing duties.
• Demonstrated ability to utilize data-driven insights to track progress, measure insights, and report on key metrics.
• Proven track record in program and project management, risk management, and strategic planning; experience working with cross-functional teams and managing complex initiatives through to completion.
• Excellent communication and interpersonal skills and high emotional intelligence, with the ability to influence and engage stakeholders at all levels. Experience presenting and tailoring messaging to varying audiences.

EDUCATION, EXPERIENCE, AND/OR LICENSES:

• Bachelor’s degree and a minimum of ten (10) years’ direct experience working in one or more disciplines related to the role (e.g., policy, law, compliance, information security, operational risk management, audit, records management, program, and project management).
• IAPP Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), or Certified Information Security Manager (CISM) or willingness to complete such certification within a reasonable time following hire.
• Minimum of ten (10) years’ direct experience in either project management or records management and implementing and using project and records management tools and concepts.

PREFERRED QUALIFICATIONS:

• Project management certification (PMP) preferred, with demonstrated experience managing complex initiatives. Change management certification (CCMP) strongly preferred to ensure effective adoption and stakeholder engagement.
• Advanced understanding of core privacy and data protection principles under the GDPR and/or CCPA, direct marketing techniques, online privacy, or information security.
• Hands-on experience working across teams on initiatives aimed at responsible AI principles or implementation of industry best practices within the realm of AI development and use.
• Strong skills and experience utilizing AI tools for business, such as creating operational efficiencies using OpenAI’s ChatGPT, or the willingness to learn and deploy AI technologies.
• Experience deploying data privacy tool sets, such as implementing and working within Mine.OS.
• Experience directly using the Alteryx suite of products to drive business processes and efficiencies.

Find yourself checking a lot of these boxes but doubting whether you should apply? At Alteryx, we support a growth mindset for our associates through all stages of their careers. If you meet some of the requirements and you share our values, we encourage you to apply. As part of our ongoing commitment to a diverse, equitable, and inclusive workplace, we’re invested in building teams with a wide variety of backgrounds, identities, and experiences.

Benefits & Perks:

Alteryx has amazing benefits for all Associates which can be viewed here.

This position involves access to software/technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.