Program Manager, Privacy

This is a fully remote position, open to applicants in Kansas, +1 more state.

📋 Description

• Assist in overseeing operations, executing, and enhancing H&R Block’s Privacy Program for the Wave and Block small business services segments.

• Define, implement, and continually refine the Program strategy, roadmap, operating model, and priorities.

• Update, implement, and maintain policies, procedures, standards, playbooks, and controls related to privacy.

• Lead initiatives aimed at mitigating risks associated with business customer data and personal information.

• Assess and promote the responsible use of artificial intelligence.

• Execute and enhance privacy training and awareness programs.

• Lead cross-functional teams to implement operational changes for legal and regulatory compliance.

• Assist with incident response, including coordination, investigation support, remediation, and communications.

• Conduct privacy impact assessments for products, features, integrations, marketing initiatives, vendors, and internal processes.

• Support supplier risk management, including vendor reviews, data-sharing arrangements, contract privacy terms, onboarding, offboarding, and remediation.

• Administer and enhance processes for consumer, employee, and business customer privacy requests.

• Collaborate with Product, Technology, Data, Marketing, Sales, and Customer Support teams to integrate privacy-by-design principles.

• Develop and maintain Program metrics and key risk indicators.

• Present to Enterprise Risk Committees and coordinate activities with senior leadership.

• Manage the Program budget.

⛳️ Requirements

• Bachelor’s degree in a relevant field (e.g., Business, Technology, Information Security, or Management).

• 8 years of experience in a data privacy or information security role, or similar experience in privacy, technology, information security, compliance, audit, or program management.

• Solid understanding and operational knowledge of privacy and data protection principles, laws, and regulations pertinent to B2B small business services, including data breach notification laws, marketing and consent requirements, vendor oversight, and cross-border data transfer considerations.

• Proven ability to manage multiple priorities, meet deadlines, maintain accurate documentation, and report status and metrics to leadership.

• Strong judgment, attention to detail, discretion with sensitive information, and a practical risk-based approach to balancing compliance, customer trust, and business enablement.

• Project management experience and skills, including planning work, managing dependencies, tracking deliverables, escalating risks, and driving execution through cross-functional teams.

• A strong record of building robust internal and external connections and relationships.

• Ability to influence and lead without direct authority, along with matrix management skills to oversee tasks delegated to others.

• Experience in conducting or reviewing privacy impact and risk assessments.

• Understanding of information security controls and strategies for protecting sensitive data, including countermeasures.

• Excellent oral, written, and interpersonal communication skills.

• Strong presentation and facilitation skills to effectively communicate with and persuade diverse audiences, including business leaders.

• Experience in developing and managing program budgets.

• Privacy certification (e.g., CIPP) is highly preferred.

• Project management certification (e.g., PMP).

• Experience in conducting or coordinating privacy impact assessments, vendor privacy reviews, data mapping, data sharing reviews, data rights request workflows, incident response activities, or privacy control testing.

• Demonstrated success in a risk management, compliance, legal, or audit role.

• Background in small business services, tax, or finance.

• Graduate degree (e.g., MBA).

🏝️ Benefits

• Competitive pay.

• Comprehensive benefits.

• Support for life both in and outside of work.

• Continuous learning opportunities.

• High Performing, Connected Culture.

• Well-being support.