VP, Chief Privacy Officer

The Vice President, Chief Privacy Officer (“CPO”) is a senior enterprise leader responsible for directing the Company’s privacy program and providing strategic leadership regarding privacy, data protection, artificial intelligence governance, responsible data use, cybersecurity-related privacy matters, and applicable legal and regulatory requirements.
The CPO will serve as the Company’s principal privacy leader and will oversee the development, implementation, and continuous improvement of an enterprise privacy framework appropriate for a highly regulated life insurance and financial services organization. The role will help ensure that personal information, policyholder data, consumer data, employee data, producer information, and other sensitive information are collected, used, disclosed, retained, and protected in accordance with applicable law, regulatory expectations, Company policies, and enterprise risk tolerances.
The CPO will also serve as a senior leader in the Company’s artificial intelligence governance program. This individual will be expected to bring demonstrated experience advising on, developing, or implementing governance for artificial intelligence, machine learning, generative AI, predictive analytics, automated decision-making, and other emerging technologies in a regulated business environment.
The role will collaborate extensively with senior management, including the Chief of Data and AI, Head of Information Security, Chief Technology Officer, Chief of Operations and Information Technology, Chief Compliance Officer, Chief Risk Officer, and other enterprise stakeholders. Through these partnerships, the CPO will help align privacy, data, AI, cybersecurity, technology, operational, and regulatory priorities across the Company.
The CPO will lead a talented multidisciplinary team consisting currently of five compliance professionals and one attorney. The role will be responsible for establishing priorities, developing talent, allocating and increasing resources, improving operating efficiency, and maintaining a collaborative and high-performing team environment. The CPO will continuously assess the team’s capacity, capabilities, processes, and technology and will recommend responsible growth or additional expertise when warranted by regulatory developments, business needs, technology adoption, or enterprise risk.

Key Responsibilities
Enterprise Privacy Leadership
• Serve as the Company’s Chief Privacy Officer and principal advisor on privacy, data protection, and responsible data-use matters.
• Collaborate with key stakeholders (including the Chief Risk Officer) to mature and maintain the Company’s enterprise privacy strategy, governance structure, policies, standards, procedures, and control framework.
• Promote privacy by design and responsible data use throughout products, services, systems, business processes, and technology initiatives.
• Oversee privacy impact assessments and data-protection reviews for new or materially changed products, technologies, systems, data uses, and business processes.
• Oversee privacy risk identification, assessment, mitigation, monitoring, and reporting.
Artificial Intelligence Governance and Responsible Data Use
• Serve as a senior legal, compliance, and governance leader for the Company’s use of artificial intelligence, machine learning, generative AI, predictive analytics, automated decision-making, and other advanced technologies.
• Establish governance requirements for AI use-case intake, risk classification, approval, development, testing, validation, deployment, monitoring, change management, documentation, and retirement.
• Evaluate AI use cases involving underwriting, pricing, claims, fraud detection, customer service, marketing, operations, employee productivity, and other insurance-related activities.
• Advise on AI-related risks involving privacy, discrimination, bias, unfair trade practices, consumer protection, transparency, explainability, cybersecurity, intellectual property, confidentiality, and regulatory compliance.
• Advise executive leadership and the Board, as appropriate, regarding material AI risks, governance maturity, and responsible technology strategy.
Legal and Regulatory Compliance
• Advise the Company regarding federal, state, and applicable international privacy, data-protection, cybersecurity, consumer-protection, insurance, and technology-related legal requirements.
• Monitor legislative, regulatory, enforcement, and litigation developments affecting privacy, consumer data, AI, automated decision-making, and life insurance operations.
• Evaluate the business impact of new or changing requirements and coordinate implementation with affected functions.
• Provide legal and regulatory guidance concerning data collection, data sharing, analytics, profiling, retention, deletion, consent, and consumer rights.
• Select, retain, and manage outside privacy, AI, regulatory, and technical advisors where specialized expertise is necessary.
Privacy Incident and Cybersecurity Collaboration
• Provide privacy leadership in connection with cybersecurity incidents, data-loss events, unauthorized access, and other potential privacy breaches.
• Partner closely with the Head of Information Security, Technology, Legal, Compliance, Operations, and Communications during incident response.
• Direct or oversee legal and regulatory analyses regarding breach notification, consumer notice, regulatory reporting, and documentation.
Senior Management Collaboration
• Serve as a trusted advisor to senior management on privacy, AI governance, responsible data use, technology, cybersecurity, and regulatory matters.
• Establish strong working relationships with the Chief of Data and AI, Head of Information Security, Chief Technology Officer, Chief of Operations and Information Technology, and other senior leaders.
Enterprise Governance
• Chair, co-chair, or serve as a principal advisor to committees responsible for privacy, AI governance, data governance, cybersecurity, technology risk, or regulatory compliance.
• Ensure that governance committees receive accurate, timely, and decision-useful information regarding material risks, emerging regulation, incidents, and remediation.
Team Leadership and Organizational Effectiveness
• Lead, mentor, and develop a multidisciplinary team of five compliance professionals and one attorney.
• Establish a clear vision, annual priorities, performance objectives, and operating plans for the team.
• Align team resources with the Company’s most significant privacy, AI, regulatory, and data-related risks.
• Develop team members through coaching, stretch assignments, targeted training, succession planning, and meaningful exposure to senior leadership.
Operational Efficiency and Continuous Improvement
• Continually evaluate the privacy function’s operating model to improve efficiency, responsiveness, consistency, and risk coverage.
• Identify opportunities to simplify, standardize, and automate recurring privacy, AI governance, and compliance processes.
• Implement risk-based intake, triage, review, and escalation processes.