Lead, Data Privacy

Guild Mortgage Company, closing loans and opening doors since 1960. As a mortgage banking firm we are dedicated to serving the homeowner/buyer. Our goal is to provide affordable home financing for our customers, utilizing the best terms available while providing a level of professionalism and service unsurpassed in the lending industry.

Position Summary

The Data Privacy Lead plays a key role within the Technology Division, responsible for establishing, implementing, and maintaining the organization’s data privacy program. This role ensures that the collection, use, sharing, and protection of sensitive data complies with applicable privacy laws, regulatory requirements, and internal policies. Reporting to the SVP, IT Governance, this position partners closely with IT Governance, Information Security, Data Services, Legal, Compliance, IT and business stakeholders to operationalize privacy controls, manage privacy risks, and support regulatory readiness across the enterprise.

Compensation

This role is an exempt position with a targeted salary range of $109,000 to $156,000 annually.

Compensation at Guild is influenced by a wide array of factors including but not limited to local and federal minimum wage requirements, education, level of experience, and applicant’s geographical location.

Essential Functions

• Lead the development, implementation, and continuous improvement of the enterprise Data Privacy Program aligned with regulatory requirements and risk frameworks.
• Partner with Information Security to mature the Data Loss Prevention Program.
• Provide direction and monitor that privacy requirements are embedded into IT systems, processes, and business operations.
• Monitor and interpret evolving data privacy laws and regulations (e.g., GLBA, CCPA/CPRA, state privacy laws, FTC expectations).
• Translate regulatory requirements and company policies into actionable controls, procedures, and business requirements.
• Support regulatory exams, audits, and assessments related to data privacy.
• Maintain documentation and evidence to demonstrate compliance with privacy obligations.
• Develop and implement privacy policies, standards, and procedures governing data handling, classification, retention, and protection.
• Lead efforts to identify and maintain data inventories and data flow mappings across systems and third parties.
• Partner with Data Governance on data classification, data lineage and data lifecycle management.
• Classify data based on sensitivity and ensure appropriate controls are applied.
• Partner with IT and business teams to ensure accurate tracking of where data is stored, processed, and transmitted.
• Partner with Information Security to monitor and enhance data masking and encryption policies and enforcement.
• Lead efforts to conduct NIST Privacy Assessments.
• Partner with IT Governance and Vendor Management to ensure third parties meet privacy requirements throughout the vendor lifecycle.
• Support processes for handling data subject rights requests (e.g., access, deletion, correction). Partner with Compliance and IT teams to ensure timely and accurate responses.
• Collaborate with Information Security and Incident Management teams to: Assess privacy impact of security incidents, support breach notification processes, ensure regulatory reporting obligations are met.
• Assess privacy risks associated with AI, machine learning, and data-driven technologies.
• Partner with IT Governance and AI teams to align AI use with privacy regulations and ethical standards.
• Identify privacy risks and recommend mitigation strategies aligned with enterprise risk tolerance.
• Integrate privacy risk into the broader Enterprise Risk Management Program and Risk Register.
• Develop and maintain privacy metrics and KPIs/KRIs (e.g., assessment completion, data inventory coverage, incidents).
• Report on privacy risks, issues, and program maturity to leadership.
• Develop and deliver privacy awareness and training programs for employees and stakeholders.
• Promote a culture of data protection and responsible data handling across the organization.
• Provide guidance to business units on privacy best practices and compliance expectations.
• Evaluate and recommend data privacy tools and technologies to enhance data discovery, consent management, etc.

Qualifications

• Bachelors Degree directly related to the position or equivalent, preferred.
• Degree in Information Technology, Cybersecurity, Risk Management, Business, or related field.
• Minimum seven years experience in data privacy, risk management, compliance, or information security. Experience in financia