Job Description Summary

The Senior Privacy Program Manager is a key member of the GE Aerospace privacy team, reporting directly to the General Counsel, Global Security & Digital and Chief Privacy Officer for the Aerospace business. Within this role, you will work closely with privacy counsels, other legal colleagues, Digital Technology, HR, and business teams to help ensure that GE Aerospace meets privacy regulatory requirements and customer expectations in a way that enables innovation and continuous improvement.

Job Description

Roles and Responsibilities:

• Maintain and continuously improve the global privacy roadmap, including annual and multi‑year priorities, milestones, and success metrics.
• Define and maintain privacy program metrics and reporting (e.g., assessments, training coverage, incidents, key risk indicators), including analyzing trends, identifying emerging risks, and proposing corrective and preventive actions to leadership.
• Partner with Privacy Counsel to translate regulations (e.g., GDPR, CCPA/CPRA, other applicable laws) and customer requirements into clear internal policies, standards, FAQs, playbooks, and guidance notes and influence how these are operationalized across DT and business teams. Coordinate updates, obtain approvals, and drive communication, adoption, and change management across impacted functions.
• Lead assigned initiatives (e.g., records of processing, DPIA/PIA process, data subject rights model, privacy training) from design through implementation, using judgment to resolve complex issues and to recommend new or improved approaches. Review new and evolving data processing activities (tools, systems, analytics, AI/ML, data sharing) for privacy and data protection implications, assessing quality of information provided and asking pertinent questions to get to root causes.
• Provide pragmatic recommendations on lawful basis, data minimization, retention, and controls, offering new solutions outside of set parameters where needed and constructing clear, risk‑balanced recommendations for stakeholders.
• Conduct or coordinate privacy impact assessments for higher‑risk initiatives, document risks and mitigations, and partner with Digital Technology and process owners to ensure mitigations are implemented and tracked to closure, escalating material issues and influencing priority decisions where appropriate.
• Collaborate with Privacy Counsel and Sourcing on privacy aspects of vendor and customer arrangements (e.g., DPAs, cross‑border transfers, security requirements).
• Support reviews of privacy/security questionnaires, due diligence, and ongoing monitoring, using multiple internal and some external sources to inform recommendations on vendor and customer risk.
• Support the privacy team in analyzing potential privacy incidents and data breaches, including triage, regulatory risk assessment, documentation, remediation tracking, and lessons learned.
• Summarize impacts and recommend updates to policies, controls, processes, and training, communicating difficult concepts in clear, business‑relevant language and influencing stakeholders to adopt recommended changes.
• Partner with Privacy Counsel to design and deliver privacy training and targeted communications for employees and people leaders, tailoring content based on audience risk profile, trends in incidents/assessments, and regulatory developments.
• Partner collaboratively with other members of the team on privacy and data protection initiatives, acting as a resource for colleagues with less experience and guiding others to consider different points of view on privacy risk and priorities.

Required Minimum Qualifications:

• Bachelor’s degree from accredited university or college.
• Minimum 7 years as program manager or privacy analyst
• Demonstrated experience leading cross‑functional projects or programs in a complex, regulated environment.
• Note: Military experience is equivalent to professional experience

Desired Qualifications:

• Proactive and defined self-starter with superior communication skills.
• Established program management experience.
• Familiarity with global privacy frameworks and laws (e.g., GDPR, CCPA/CPRA, and other regional requirements).
• Ability to work with cross-functional teams, including IT, compliance and executive leadership.
• Familiarity with cross border mechanisms, DPIAs/PIAs, TIAs, data mapping, ROPAs, incident response, technologies, data protection protocols, and IT security frameworks.
• Innovative, forward-thinking, and results-oriented with a passion to solve complex problems in a creative and pragmatic way and to translate laws and regulations into actiona