Senior Director Global Data Privacy

We are looking for a dynamic, talented, and experienced leader to join our Ethics and Compliance team as the Senior Director Global Data Privacy headquartered in Indianapolis, IN.  This role is designated hybrid and allows you to work from your home office; the role requires 15%-25% of travel.   

In this role, the Senior Director, Global Data Privacy will make an impact in the following ways:

• Comprehensively strengthens and improves the strategic and operational data privacy program that defines, develops, maintains, and implements policies and processes that enable consistent and effective data privacy practices for Cummins

• Serves as the primary data privacy expert and information resource for team members and internal customers across the enterprise

• Serves as a subject matter expert in global data privacy matters and assesses, refines, and improves privacy processes, practices, and directs improvements to the overall data privacy program

• Maintains and enhances knowledge and understanding of privacy regulations, trends, developments, and the implications of the same in coordination with the Legal department

• Collaborates and partners with key stakeholders in developing and implementing Cummins’ global data privacy policy strategy

• Effectively partners with a global IT and Information Security team to assess, recommend, and implement strategies to ensure data is accessible, reliable, and protected.

• Develops and leads an effective data privacy program that detects, prevents, and mitigates data privacy related compliance risks areas

• Create and maintain a strategic and comprehensive information privacy program that includes but is not limited to policies and processes that ensure the confidentiality of Personal Identifiable Information (PII) in accordance with federal, state laws, and appropriate global data privacy laws

• Investigates privacy concerns, auditing, and monitoring systems and processes that impact information privacy, reporting of privacy metrics to leadership, and ongoing privacy risk assessments.

• Performs information privacy risk assessments/analysis and develops corresponding work plans and corrective action plans

• Effectively communicates and provides practical solutions to leadership, governance committees and other key stakeholders in connection with data privacy compliance risks

• Collaborates with cross functional stakeholders and closely partners with business and functional teams in implementing data privacy policies tailored for regions and aligned with the Cummins’ Ethics and Compliance global program

• Develops and implements comprehensive training and communication plans for employees and third parties, where appropriate, to increase data privacy awareness and knowledge

• Initiates, facilitates, and promotes activities to enhance data privacy awareness and knowledge

• Manages the Cummins’ Global Data Privacy team and provide support to regional ethics and compliance leaders in implementing the data privacy programs initiatives at the Area Business Organizational level

• The Senior Director will serve as a subject matter expert for existing and emerging privacy regulations including the European Union’s General Data Protection Regulation (GDPR), China’s Personal Information Protection Law (PIPL), Brazil’s data protection laws (LGPD), applicable comprehensive U.S. data privacy laws such as the California Consumer Privacy Act (CCPA), and other privacy laws applicable to Cummins.  An essential component of the job is to develop an enterprise framework for collecting; appropriately naming/classifying, storing, tracking use, and appropriately deleting information through the data lifecycle. 

To be successful in this role you will need the following:

Courage - Stepping up to address difficult issues, saying what needs to be said.

Drives results - Consistently achieving results, even under tough circumstances.

Drives engagement - Creating a climate where people are motivated to do their best to help the organization achieve its objectives.

Drives vision and purpose - Painting a compelling picture of the vision and strategy that motivates others to action.

Manages ambiguity - Operating effectively, even when things are not certain or the way forward is not clear.

Organizational savvy - Maneuvering comfortably through complex policy, process, and people-related organizational dynamics.

Persuades - Using compelling arguments to gain the support and commitment of others.

Communicates effectively - Developing and delivering multi-mode communications that convey a clear understanding of the unique needs of different audiences.

Global perspective - Taking a broad view when approaching issues, using a global lens.

Manages complexity - Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.

Change Management - Applies the Cummins structured process and tool set for engaging individuals and organizations through change to achieve and sustain business results and outcomes.

Regulatory Compliance - Champions compliance with regulatory requirements imposed on industry by local, state, provincial, national, and international organizations the European Union’s General Data Protection Regulation (GDPR), China’s Personal Information Protection Law (PIPL), Brazil’s data protection laws (LGPD), applicable comprehensive U.S. data privacy laws such as the California Consumer Privacy Act (CCPA), and other privacy laws applicable to Cummins.

Compliance Program Management - Develops and documents compliance programs incorporating the five strategic elements of a world-class compliance program (tone at the top, risk assessment, training and communication, oversight, and reporting) to ensure that Cummins stays in compliance and reduce risks for Cummins and its shareholders.

Education, Licenses, Certifications

• Bachelor’s degree from an accredited college or university
• Strong preference for Juris Doctor

Experience

• At least 10 years of relevant professional experience in privacy counseling and compliance, or equivalent experience
• Multinational experience strongly preferred
• Strong leadership and vision with experience aligning resources and priorities
• Capability and competency development in support of career advancement
• Strong analytical skills and aptitude, with ability to assess risk and evaluate tradeoffs
• Experience in data privacy counseling, compliance program management and operational execution; and strong problem-solving skills
• Significant work experience including managing others, and executing process improvements; financial and budgetary experience
• Excellent leadership and communication skills including the ability to motivate, inspire, persuade and influence
• Strong conflict management skills
• Ability to develop data privacy strategy compliance strategy tailored for region and work with corporate and regional leadership to ensure implementation
• Strong attention to detail
• Ability to work independently with minimal supervision, as well as in a team-oriented, collaborative environment
• Strong project management skills including the ability to prioritize multiple time-sensitive, complex projects and timely deliver work-product
• Ability to relate well across cultures with a wide variety of people in a professional and diplomatic manner

Compensation and Benefits

Base salary range: $150,000-$250,000.  Please note that the salary range provided is a good faith estimate on the applicable range. The final salary offer will be determined after considering relevant factors, including a candidate’s qualifications and experience, where appropriate.  Additional benefits vary between locations and include options such as our 401(k) Retirement Savings Plan, Cash Balance Pension Plan, Medical/Dental/Life Insurance, Health Savings Account, Domestic Partners Coverage, and a full complement of personal and professional benefits.

Cummins and E-verify

Cummins validates right to work using E-Verify. Cummins will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS), with information from each new employee’s Form I-9 to confirm work authorization.