Senior Manager, Customer Privacy

Role Overview

• Aligns and shapes enterprise strategy around privacy and data governance functions to address risks related to unauthorized use or loss of personal information.
• Owns PG&E's enterprise privacy compliance program and ensures appropriate enterprise controls are in place to facilitate compliance for California Consumer Privacy Act (CCPA), Health Insurance Portability and Accountability Act (HIPAA), CPUC Rule 27 and all other privacy regulations.
• Counsels executives, up to SVP, on privacy and data governance risks and issues; builds enterprise consensus to implement key strategies
• Resolves complex regulatory and business problems, including resolution and interface with CA Governor's Office, CPUC, CA State guidance
• this may involve data requests, policy shaping input, and resolution, etc.
• Leads implementation of significant enterprise-wide cultural and program changes, improvements, and enhancements.
• Benchmarks program externally to identify best practices in these areas. Participates in privacy and data governance forums; may play a leadership role on behalf of PG&E.
• Reviews and/or creates internal and external policies, standards, and controls related to access and protection of enterprise personal data to ensure compliance with all relevant privacy and data protection laws and contractual commitments.
• Interfaces with PG&E functions like IT Cyber-Security, Internal Auditing, Corporate Security, Compliance & Ethics, Regulatory policy shaping alignment and integration of privacy in all facets of the business.
• Developing and/or applying innovative tools and solutions to support compliance programs and enterprise-wide initiatives, with a focus on how the compliance management system can help solve challenges and improve efficiency .
• Helping drive continuous improvement in compliance program; consistently demonstrating innovative new thinking focused on compliance strategy, performance and implementation.
• Acts as thought leader to apply benchmarking, best practices and PG&E expertise to advance privacy and data governance practices across the enterprise and resolve complex issues.

Requirements

• BA/BS or equivalent work experience in business or other relevant discipline
• 9 years of experience with at least three years of leading team, including 5 years of risk, compliance, privacy, or data governance experience
• MBA or Masters degree in related field (Desired)
• Experience working in utility sector or other highly regulated industry (Desired)
• Travel 10% of the time (Desired)

Benefits

• Eligible to participate in PG&E’s discretionary incentive compensation programs