The Executive Director, Privacy & AI Governance Technology and Operations, designs the strategy for and oversees the implementation and ongoing operation of, Sony Pictures Entertainment’s global Privacy & AI Governance technology and operations programs.
Reporting to the SPE Chief Privacy Officer, this role is accountable for operationalizing legal, regulatory, and policy requirements into scalable, technology-enabled solutions that reduce privacy and AI risk while enabling business objectives.
The role leads a global team of Privacy & AI Governance technology and operations professionals and partners closely with Privacy Legal, Information Security, Information Technology, and business stakeholders to operationalize the company’s privacy principles, including support for incident response, AI governance best practices, and advance enterprise data and AI governance initiatives.
This position plays a critical role in shaping company-wide strategy, influencing senior leadership, and supporting Sony’s digital transformation and emerging technology initiatives.
Responsibilities
Strategy and Program Leadership
- Define and own the multi-year strategy, objectives, and roadmap for the privacy and AI governance technology and operations programs, in partnership with Privacy Legal and senior leadership.
- Drive execution of the privacy and AI governance strategy by setting priorities, allocating resources, and aligning cross-functional stakeholders.
- Stay ahead of and evaluate industry, regulatory, and technology developments and trends in privacy and AI governance.
- Conduct due diligence on internal and external tools to inform and recommend strategic investments and capabilities that promote privacy and responsible AI use culture.
- Ensure privacy and AI governance technology and operations programs scale with business growth and evolving regulatory expectations.
Privacy and AI Technology and Operations Management
- Lead and oversee global privacy and AI governance technology and operations, including data subject rights requests, privacy AI impact assessments, and provide privacy enabling technical advice.
- Establish and maintain operational processes, controls, and metrics to ensure timely, consistent, and compliant execution of obligations.
- Partner with Privacy Legal to operationalize legal requirements into effective workflows, tooling, and guidance for the business.
Incident Response and Risk Management
- Together with Privacy Legal lead, manage privacy-related incident response, including information gathering, impact analysis, and coordination with Information Security and business teams.
- Actively engage in detailed review of documents, data sets, and technical materials alongside cross-functional team members to support accurate risk evaluation, remediation, reporting, and notifications, as needed.
- Contribute to continuous improvement of incident response playbooks, controls, and post-incident remediation activities.
Collaboration and Enterprise Enablement
- Represent the SPE Privacy Office in enterprise initiatives such as Sony’s Digital Transformation (DX) programs, data governance, data inventory, and data mapping efforts.
- Foster a collaborative global privacy and AI governance community by sharing best practices, lessons learned, and program updates through Sony-wide initiatives.
Team Leadership and Development
- Lead, mentor, and develop a global team of privacy and AI governance technical and operational professionals.
- Establish clear roles, responsibilities, and performance expectations aligned to organizational objectives.
- Support career development, succession planning, and capability building to ensure a resilient and scalable organization.
AI and Data Governance Development
- Design, implement, and manage enterprise AI and data governance frameworks that promote responsible use, transparency, and regulatory compliance.
- Partner with cross-functional stakeholders to help define governance structures, accountability models, and operational processes for emerging technologies.
- Drive adoption of governance tools and controls to help manage AI risk, regulatory readiness, and ethical considerations at scale.
Requirements:
- 10+ years of privacy and data protection experience (including CCPA/CPRA, GDPR, etc)
- University Degree [preferred]
- CIPP/CIPT/CIPM/AIGP certification [preferred]
- Demonstrated ability to exercise sound judgment and lead through ambiguity in emerging regulatory and technology environments.
- Experience leading and developing high-performing teams in complex, matrixed environments.
- Strong experience partnering with Legal and Compliance leaders to manage regulatory, ethical, and reputational risk.
- Proven ability to operationalize privacy, AI governance, and ethical principles through scalable systems and processes.
- Experience leading enterprise-wide privacy, AI governance, or technology compliance programs with end-to-end accountability.
The anticipated base salary for this position is $220,000-$250,000. This role may also qualify for annual incentive and/or comprehensive benefits. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.
Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics.
SPE will consider qualified applicants with arrest or conviction records in accordance with applicable law.
To request an accommodation for purposes of participating in the hiring process, you may contact us at SPE_Accommodation_Assistance@spe.sony.com.
