Auto req ID: 18432
Title: Data Privacy Lead - Remote
Job Function: Information Technology
Location: JUNEAU
Company: Harley-Davidson Motor Company
Full or Part-Time: Full Time
Shift: SHIFT1

At Harley-Davidson, we are building more than machines. It's our passion and commitment to continue the evolution of this storied brand, and heighten the desirability of the Harley-Davidson experience. To keep building our legend and leading our industry through innovation, evolution, and emotion we need the best and brightest talent. We stand for the timeless pursuit of adventure. Freedom for the soul. Are you ready to join us?

The Harley-Davidson Motor Company Corporate Headquarters in Milwaukee, WI is the site where the first H-D factory - a wooden shed - was built in 1903 in the backyard of the William C. Davidson family home. Join our team as a Data Privacy Lead - Remote.

Job Summary

The Lead Data Privacy reports to Data Privacy Manager and leads work in one or more of the following areas: Data Privacy; GIS Risk Management; PCI Compliance; or Cybersecurity & Data Privacy Training and Awareness. The Lead Data Privacy helps build and maintain a compliant privacy program across Harley-Davidson, Inc serves as the point of contact and as a subject matter expert (SME) for business partners on all things related to privacy, and monitors privacy compliance of practices across our global business functions. The DPO Lead is responsible for facilitating the GIS Risk Management Program; leading global PCI Compliance; and facilitating activities that drive our Cybersecurity & Data Privacy Training and Awareness Program. The Lead Data Privacy offers guidance and education/awareness across the organization to ensure security safeguards and privacy requirements are in place over Harley-Davidson's information assets and systems. The Lead Data Privacy is responsible for driving work that reduces compliance risk, reputational risk or damage to our Brand and will work directly with business partners to deliver results.

Job Responsibilities

• Together with the Data Privacy Manager, deliver on our Data Privacy strategy and Assessment model. Contribute to Executive Scorecards and Operational Dashboards built to communicate privacy posture across all levels of the Company
• Work with functional business leaders and staff globally to conduct Privacy Impact Assessments (PIAs) on key business processes involving privacy regulated data we collect and hold on employees, customers and dealers; assess privacy risk, prioritize gaps, and provide results via a PIA Scorecard for business leaders. Maintain and run semi-annual table tops on our global Privacy Breach Notification Process to ensure we are compliant with all relevant privacy regulatory requirements/restrictions
• Maintain and foster strong business partnerships across key areas at a director and manager level, bridging their understanding of data privacy concepts and requirements with an understanding of regional and global business practices and provide an understanding of where and how changing regulations impact HDI's lines of business
• Lead and facilitate a secured process for all HR/Legal/Ethics Investigations
• Work with global Marketing leaders and regional Legal counsel to ensure our customer-facing Privacy Notice(s), Consent Language, and Cookie Usage Policy align with our internal business practices as well as privacy laws in all countries, validate ongoing compliance, ensuring proper governance/oversight and tracking can be demonstrated to government and regulatory agencies as required
• Support efforts to ensure employee, customer and regulatory complaints and inquiries are addressed in a compliant and timely manner
• Lead tactical work to maintain and enhance our global Cybersecurity & Data Privacy Awareness Training program for employees; build and facilitate all phishing campaigns to test business behavior and track end-user knowledge; maintain monthly effectiveness metrics/scorecard for DPO Manager
• Bring strong thought-leadership to the GIS Risk Management Program; facilitate Risk Workshops for GIS Senior Leadership to review the GIS Risk Register, identify, assess, and bring visibility to the most significant IT security risks across the GIS organization while ensuring the appropriate resources are assigned to remediate risks

Education Requirements

Bachelor's Degree Preferred

Education Specifications

• Bachelor's Degree in business management, information systems or a related discipline is Preferred
• CIPP/US certification
• Master's Degree is desired
• CIPP/EU, CIPP/Financial, CIPP/T, CIPM certification Preferred
• Supervisory experience a plus

Experience Requirements

Required

• Typically requires a minimum of 8 years of related experience
• 8+ years of relevant professional experience directly related to data privacy, audit and compliance, or information security
• Demonstrated experience working in a Data Privacy or Risk function with global accountabilities. Direct experience building and facilitating Privacy Impact Assessments with business leaders/ managers to assess privacy gaps and risk, prioritize remediation requirements, and articulate those requirements to business leaders.
• Strong command of the primary data privacy principles and solid foundational understanding of key industry-leading regulations such as GDPR, APPI, etc.
• Proven ability to address privacy issues, incidents and inquiries from data subjects and to respond to them with a high degree of certainty and comprehension.
• Ability to define data privacy standards and data handling procedures that integrate with key business processes to ensure privacy standards are part of PbD (privacy by design/default) as a best practice; leverage PIAs with business leaders as the primary mechanism to assess new or inherent risk of process changes.
• Excellent communication and presentation skills and an ability to present complex regulatory requirements clearly to business leaders and working teams that include staff, managers, and directors.
• Experience driving initiatives and integration points from frameworks, strategies and roadmaps; ability to provide input and leverage knowledge across all areas of accountability as well as to work closely with key business partners and the CISO organization where dependencies exist.
• Self-directed with strong organization, communication, collaboration, and process management skills; ability to lead high performing task/working teams, and an ability to develop a continuous improvement mentality in all activities.

Preferred

• Experience leading small teams and group work activities; proven ability to develop in role and take on more accountabilities in a self-directed manner, possess a collaborative mindset and approach to work that helps create a highly effective function and attracts other similar individuals
• Experience in building and delivering security or privacy awareness presentations or training modules/content for a global audience; strong understanding of security principles, threats/threat vectors, and ability to convey technical information in clear business language
• Understanding of PCI DSS Compliance requirements, experience facilitating the PCI Attestation of Compliance process, and working with business leaders to redesign business processes as needed to meet PCI DSS requirements

Harley-Davidson is an equal opportunity employer that continues to build a culture of inclusion, belonging and equity through our commitment to attracting and retaining diverse talent from all backgrounds, without regard to race, color, religion, sex, sexual orientation, national origin, gender identity, age, disability, veteran status or any other characteristic protected by law. We believe in fairness and providing a level playing field for all. We foster a culture that thrives on diverse perspectives and contributions to ignite the creativity and innovation to fuel our business and enhance the employee and customer experience.

We offer an inclusive compensation package for all full-time salaried employees including, but not limited to, annual bonus programs, health insurance benefits, a 401k program, onsite fitness centers and employee stores, employee discounts on products and accessories, and more. Learn more about Harley-Davidson here .

Applicants must be currently authorized to work in the United States.

Direct Reports: No
Travel Required: 0 - 10%
COVID-19 Vaccine Required: No
Visa Sponsorship: This position is not eligible for visa sponsorship
Relocation: This position is not eligible for relocation assistance

.buttontext51facdfbe97f9c80 a{ border: 1px solid transparent; } .buttontext51facdfbe97f9c80 a:focus{ border: 1px dashed #ff6600 !important; outline: none !important; }

.buttontexta037c6d15f3e8b64 a{ border: 1px solid transparent; } .buttontexta037c6d15f3e8b64 a:focus{ border: 1px dashed #ff6600 !important; outline: none !important; }

.buttontext842e78ac336bc960 a{ border: 1px solid transparent; } .buttontext842e78ac336bc960 a:focus{ border: 1px dashed #ff6600 !important; outline: none !important; }