Privacy & Data Governance Risk Consultant

About the Privacy & Data Governance Risk Consultant Role at Mutual of Omaha

We’re looking for a Privacy & Data Governance Risk Consultant to lead enterprise-wide privacy and AI compliance efforts in a highly regulated environment. In this role, you’ll partner closely with legal, compliance, business, and technology teams to assess privacy risks, shape policies, and embed privacy-by-design practices across the organization. You’ll play a key role in navigating complex regulatory requirements while supporting innovation, including emerging AI technologies. This is a highly visible role ideal for someone who enjoys solving complex problems, influencing across teams, and translating regulations into practical, business-friendly solutions.

WHAT WE CAN OFFER YOU:

• Estimated Salary: $99,000 - $120,000, plus annual bonus opportunity.
• 401(k) plan with a 2% company contribution and 6% company match.
• Work-life balance with vacation, personal time and paid holidays. See our benefits and perks page for details.

Applicants for this position must not now, nor at any point in the future, require sponsorship for employment.

What You'll Do as a Privacy & Data Governance Risk Consultant

• Lead Enterprise Privacy and AI Risk Assessments: Conduct complex regulatory privacy risk reviews, identify risks and controls, and provide actionable recommendations to senior leadership. Monitor remediation efforts and document outcomes within the company’s Governance, Risk & Compliance (GRC) platform.
• Develop and Maintain Privacy Policies and Standards: Lead the creation, implementation, and ongoing maintenance of enterprise privacy policies, standards, and procedures to ensure compliance with evolving federal and state regulations.
• Advise on Privacy and AI Laws and Regulatory Trends: Research and interpret new and emerging privacy and AI laws, regulations, and guidance. Partner with stakeholders to translate regulatory changes into compliant business processes, particularly within insurance and financial services.
• Partner Cross-functionally to Embed Privacy-by-Design: Collaborate with legal, compliance, IT, data governance, AI governance, marketing, and business teams to integrate privacy risk management into operations, systems, and strategic initiatives.
• Provide Subject Matter Expertise on Data Use, Vendors, and Training: Review complex initiatives involving data sharing, minimization, and vendor risk. Deliver practical guidance, influence decision-making, and support the development and delivery of role-based privacy training.

What You’ll Bring

• Juris Doctor degree with 3-6 years of privacy work experience.
• Deep knowledge of privacy and AI regulations. Strong experience interpreting and applying federal and state privacy and AI laws (e.g., HIPAA, GLBA, CCPA) within insurance and/or financial services, and translating requirements into actionable business guidance.
• Technical and data governance fluency. Solid understanding of data governance, data lifecycle management, enterprise systems, Generative AI, predictive models, and related technical concepts, with the ability to evaluate risk and proposed technical solutions.
• Strong stakeholder partnership and influence skills. Proven ability to collaborate with legal, compliance, business, and technical teams, influence senior stakeholders, and drive cultural and behavioral change in fast-paced, regulated environments.
• Advanced analytical, communication, and problem-solving skills. Ability to assess complex compliance scenarios, analyze large data sets, develop practical solutions, and clearly communicate recommendations to both technical and non-technical audiences.
• Leadership, organization, and execution mindset. Strong strategic planning, project management, and organizational skills, with the ability to work independently, manage competing priorities, and drive initiatives through completion.
• You promote a culture of diversity and inclusion, value different ideas and opinions, and listen courageously, remaining curious in all that you do.
• Able to work remotely with access to a high-speed internet connection and located in the United States or Puerto Rico.

Preferred Qualifications

• Knowledge of individual life, health products, group products, securities, banking products and related services preferred.
• Experience in insurance, financial services, banking, or securities environments.
• Background in compliance program development, information security, audit, or risk management.
• Familiarity with Agile delivery models.
• Experience working with enterprise privacy or GRC platforms.

Key skills/competency

• Privacy Regulations
• AI Compliance
• Data Governance
• Risk Assessment
• Policy Development
• Stakeholder Management
• Regulatory Interpretation
• GRC Platforms
• Data Protection
• Problem Solving