SVP, Data Governance, Privacy & Risk

Job Description

SVP, Data Governance, Privacy & Risk 

Who We Are 

Horizon Media, founded in 1989 by Bill Koenigsberg, is recognized as one of the most innovative marketing and advertising firms. We are headquartered in New York City, with offices in Los Angeles and Toronto. A leader in driving business solutions for marketers, Horizon is known for its highly personal approach to client service. Renowned for its incredible culture, Horizon is consistently named to all the prestigious annual Best Places to Work lists published by Fortune, AdAge, Crain’s New York Business and Los Angeles Business Journal. 

Together we are building a place of belonging. At Horizon, we understand the value that different perspectives can bring to our clients and culture, so we strive for an environment where our employees feel welcomed, safe and empowered. We value YOU and believe that your authentic voice and unique perspective allows us to create a more rewarding culture, and experience, together. 

Our simple recipe for success? We hire talented people (thinkers, doers, dreamers, makers), challenge them and give them every opportunity to grow. 

Where You'll Be 

This role is based out of our New York City headquarters. We offer a hybrid work model, allowing for a mix of in-office and remote work. We are also open to considering a fully remote arrangement for an exceptional candidate. 

What You’ll Do 

The SVP of Data Governance, Privacy & Risk will be a senior executive leader responsible for establishing and overseeing the global privacy, data protection, and data governance strategy. This role reports to the Chief Information Security Officer (CISO) and will manage the Compliance, Risk, Data Privacy, and Data Governance departments for the enterprise. 

Duties and Responsibilities by Department: 

Data Governance Department 

• Framework and Policy Development: Design, implement, and maintain the enterprise-wide data governance framework, policies, and standards. 

• Data Stewardship: Establish and lead a data steward program, defining roles and responsibilities for data owners and custodians across the business. 

• Data Quality: Implement processes and tools to monitor and improve data quality, accuracy, consistency, and reliability. 

• Metadata and Cataloging: Oversee the development and maintenance of a central data catalog and metadata repository to ensure data is discoverable and understandable. 

• Data Lineage: Implement and manage data lineage practices to track the origin, transformation, and usage of data across systems. 

• Stakeholder Collaboration: Partner with internal business and technology leaders to ensure adoption of data governance policies and collaborate with external partners to align on data standards and practices. 

Data Privacy Department 

• Global Privacy Compliance: Partner with Business and Legal Affairs (BALA) team to ensure and demonstrate compliance with all applicable global data privacy regulations, including GDPR, CCPA/CPRA, and other emerging laws. 

• Privacy by Design: Partner with product, technology, and business teams to embed privacy-by-design principles into all new products, platforms, and services. 

• Data Protection Impact Assessments (DPIAs): Lead and manage the process for conducting DPIAs for new and existing data processing activities. 

• Data Subject Rights: Oversee and manage the processes for handling data subject access requests (DSARs) and other individual rights. 

• Incident Response: Lead the privacy response to data incidents and breaches, including investigation, regulatory notifications, and remediation efforts. 

• Stakeholder Engagement: Act as a key liaison between internal legal, product, and marketing teams on privacy-related matters, and engage with external regulators, clients, and partners on privacy inquiries. 

Risk Management Department 

• Risk Assessment: Perform ongoing risk assessments to identify, analyze, and evaluate data-related risks to the organization. 

• Risk Mitigation: Develop and implement risk mitigation strategies and business continuity plans to address identified threats. 

• Risk Reporting: Prepare and present risk reports tailored to various audiences, from the Board of Directors to individual department heads.