About The Job:

 Serves as the company’s privacy expert, shaping enterprise privacy processes, data governance principles, and privacy-forward design. Advises leaders and cross-functional partners on complex privacy matters, privacy requirements, risk assessments, and enterprise initiatives to develop practical solutions with broad business and regulatory impact. 

What You'll Do:

• Represent privacy across the enterprise consulting on privacy programs to ensure compliance with privacy laws and regulations and establish readiness for the future so that privacy acts as a differentiator that helps unlock the value of data. 

• Responsible for conducting risk assessments and risk oversight to ensure compliance with privacy policies and regulation. 

• Relied on as the Privacy Expert and collaborating across the Enterprise, Affiliates and field force on privacy initiatives and issues 

• Expert in interpreting data classification questions.  This includes understanding NM’s many types of product and client data and how it needs to be interpreted. 

• Serve as Privacy expert on Corporate Initiatives 

• Designs and delivers training needed for the enterprise, affiliates and field force that ensures strong privacy understanding of state and federal governance agencies and laws, and the highest data protections. 

• Create solutions to address changing regulatory environment.  This includes developing process changes and influencing internal stakeholders to address changes. 

• Develops and analyzes metrics and reports and communication/awareness efforts for the Home Office and the Field. 

• Works closely with the Information Risk Management Polices, Controls and communications Team in Technology to manage and coordinate information protection policies, procedures, and resource material on internal and field facing dissemination platforms. 

What You'll Bring:

• Bachelor's degree in business, information technology, or related field. 

• Minimum of 10 years’ experience in Privacy, Records and Information Management, Data Governance, Compliance, Information Risk, or a related discipline .  

• Understanding of the Financial Service Industry (GLBA); Healthcare (HIPAA); Technologies (Functionalities of SaaS) and technology concepts. 

• Highly effective interpersonal skills with the ability to effectively interact, influence, and persuade others. 

• Strong organizational skills with the ability to set priorities and carry out multiple, diverse assignments. 

• Proven ability to lead cross-departmental projects, translating complex requirements into actionable plans and driving execution. 

• Proven ability to negotiate and influence with all areas of the company without direct authority 

• Superior verbal and written communication skills, as well as presentation and platform speaking skills. 

• Strong documentation skills, including the ability to clearly summarize complex privacy matters in risk assessments, guidance, and stakeholder-ready materials. 

• Demonstrated ability to lead, coach and mentor other staff members 

• Certified Privacy-related experience with certification, such as Information Protection Professional (CIPP) or Certified Information Privacy Manager (CIPM) strongly preferred 

• Understanding of privacy frameworks, such as NIST, ISO, and SANS. 

• Understanding of Data Structures and Architecture such as: Domains, Databases, Tables, and BLOBS preferred 

• Understanding Lines of Defense Understanding; RSA Archer Experience preferred 

• Experience with Privacy Technology Suites (e.g.: OneTrust), ServiceNow and Data Governance technology (e.g. Atlan) preferred. 

Skills You Have:

Documentation - Prepares communicable material that is used to describe, explain or instruct regarding some attributes of an object, system or procedure. 

Prioritization - Assesses and accurately assigns priority levels to different tasks based on importance, urgency, and alignment to business and strategic goals. 

Risk Assessment & Identification - Leverages industry knowledge to determine and seek hazards that could potentially prevent the program, enterprise, or investment from achieving their objectives; designs systematic processes of identifying severity of hazards and evaluating the scale and impacts of any associated risk on the business. 

Consulting - Connects with stakeholders to understand and gain specific information to help resolve customer problems in a given domain. Communicates effectively intent to customers, solicits customer requirements, utilizes domain knowledge and collaborates with the right stakeholders. 

Cross Functional Partnering & Planning - Facilitates collaboration, communication, coordination, and planning with individuals and teams from different functions within the organization, and who have different areas of expertise, to achieve common goals. 

#LI-Hybrid

Compensation Range:

Pay Range- Start:

Pay Range- End:

Geographic Specific Pay Structure:

Structure 110:

Structure 115:

We believe in fairness and transparency. It’s why we share the salary range for most of our roles. However, final salaries are based on a number of factors, including the skills and experience of the candidate; the current market; location of the candidate; and other factors uncovered in the hiring process. The standard pay structure is listed but if you’re living in California, New York City or other eligible location, geographic specific pay structures, compensation and benefits could be applicable, click here to learn more.

Grow your career with a best-in-class company that puts our clients' interests at the center of all we do. Get started now!

Northwestern Mutual is an equal opportunity employer that welcomes talented individuals of all backgrounds. We are committed to creating and maintaining an environment in which each employee can contribute creative ideas, seek challenges, assume leadership and continue to focus on meeting and exceeding business and personal objectives.