Senior Director, Privacy & Data Governance Operations

_________________

Position Summary

The Senior Director, Privacy & Data Governance Operations will support the execution and continued advancement of the NBA’s global privacy and data governance program, reporting to the Chief Privacy & Data Governance Officer.

This role will serve as a subject matter expert and advisor to management and stakeholders across the NBA, WNBA, NBA G League, Basketball Africa League, international regions, and corporate functions. The role will partner closely with Legal, Risk, Cybersecurity, Technology, Direct to Consumer, Data Strategy and Analytics, and other internal teams to incorporate privacy and responsible data practices into business operations. The role will work independently and cross-functionally to manage PDG  operations, coordinate cross-functional initiatives, assess complex privacy and data governance requirements, identify and evaluate risks, and provide practical, business-aligned recommendations.

The position will help enable the NBA’s responsible use of data and emerging technologies by providing expertise and guidance on privacy, data governance, artificial intelligence, and related regulatory requirements. The role requires experienced program leadership, deep subject matter expertise, strong business judgment, and the ability to develop complex deliverables that reflect deep expertise, influence stakeholders and translate complex privacy and data governance considerations into clear, actionable guidance.

Major Responsibilities

• Support the Chief Privacy & Data Governance Officer and the PDG function in the execution and continued development of the NBA’s privacy and data governance strategy, programs, and priorities.
• Serve as a subject matter expert and advisor to management and stakeholders across departments, regions, and affiliated leagues on complex privacy and data governance requirements and risk considerations.
• Independently assess data practices to identify privacy, governance, and data quality risks and develop practical recommendations and mitigation approaches.
• Lead complex cross-functional initiatives within an assigned scope; establish execution plans and deliverables, coordinate project teams, track milestones, dependencies, risks, decisions, and follow-up actions, and provide course correction as needed.
• Translate privacy and data governance strategy, policies, regulatory requirements, and leadership decisions into clear workflows, procedures, templates, controls, and accountability mechanisms for business and technology teams.Lead governance, administration, and continuous improvement activities associated with the privacy and data governance platforms (e.g., Asana, OneTrust, Drata, and others) and privacy management processes.
• Manage the operational processes supporting Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), data inventories, individual rights requests, retention and deletion, incident response, regulatory commitments, and remediation activities.
• Translate data ownership, stewardship, classification, data quality, metadata, lifecycle, access, retention, and responsible data-use requirements into repeatable practices across business functions and data domains.
• Apply global privacy and data governance requirements—including GDPR, UK GDPR, LGPD, U.S. state privacy laws, and relevant local requirements—to operational processes supporting advertising technology, marketing technology, fan engagement, direct-to-consumer services, and digital products.
• Coordinate operational requirements related to consent and preference management, identity resolution, profiling and personalization, audience measurement, data sharing, tracking technologies, and other elements of the fan and consumer data lifecycle.
• Plan and manage PDG committees, councils, and working groups; prepare agendas and decision materials, document decisions, assign and track follow-up actions, and provide clear records of accountability.
• Develop metrics, dashboards, and executive reporting that provide visibility into program demand, progress, significant findings, open risks, control effectiveness, mitigation plans, and business outcomes.
• Serve as a subject matter expert on privacy considerations related to media, broadcasting, digital content, audience measurement, direct-to-consumer platforms, advertising technology, marketing technology, digital products, analytics, artificial intelligence, and emerging technologies.
• Provide guidance on the responsible use of artificial intelligence, machine learning, and automated decision-making technologies involving personal, confidential, and restricted data.
• Monitor evolving privacy, data governance, artificial intelligence, and emerging technology requirements and evaluate their potential impact on NBA business activities, including developments related to the EU AI Act and other emerging global regulatory frameworks.
• Support the application of recognized privacy and governance frameworks and standards, including the NIST Privacy Framework and ISO/IEC 27701.
• Identify and communicate emerging privacy, data governance, and AI-related risks, industry trends, and leading practices to management and relevant stakeholders.
• Develop and deliver communications, training, and awareness initiatives to strengthen privacy and data governance capabilities across the organization.

Required Education/Professional Experience

• 10+ years of relevant experience in privacy, data governance, compliance, technology, consulting, legal, or a related field.
• Bachelor’s degree or equivalent relevant professional experience; advanced degree preferred.
• Experience applying recognized privacy and governance frameworks, including the NIST Privacy Framework, ISO/IEC 27701, or comparable standards.
• Professional privacy certifications such as CIPP/US, CIPP/E, CIPM, or CIPT strongly preferred.

Required Skills/Knowledge

• Deep knowledge of privacy, data governance, and responsible AI frameworks, controls, regulations, and leading practices.
• Strong knowledge of global privacy and data protection requirements, including GDPR, UK GDPR, PIPL, LGPD, and U.S. state privacy laws.
• Expertise in Privacy by Design principles, privacy risk assessment methodologies, and privacy program management.
• Strong understanding of how global privacy and data governance requirements apply to direct-to-consumer, advertising technology, marketing technology, digital product, consumer data ecosystems, and emerging technologies.
• Experience supporting privacy, data governance, or technology initiatives within media, sports, entertainment, broadcasting, streaming, digital content, or consumer-facing organizations.
• Experience with consent management, identity resolution, data sharing, measurement technologies, and related privacy considerations.
• Familiarity with recognized privacy and governance frameworks, including the NIST Privacy Framework and ISO/IEC 27701.
• Strong understanding of artificial intelligence governance principles, emerging AI regulatory requirements, and responsible use of personal, confidential, and restricted data in AI-enabled technologies.
• Strong cross-functional collaboration skills across legal, technology, analytics, marketing, and business teams.
• Sound business judgment with the ability to balance risk, compliance, and operational priorities.
• Strong analytical, problem-solving, strategic thinking, and organizational capabilities.
• Excellent written and verbal communication skills, with the ability to translate complex concepts into clear, actionable guidance.

Salary Range:

$200,000-$230,000

Job Posting Title:

Employees currently are eligible to receive an annual discretionary performance bonus, awarded at the sole discretion of the Company and subject to any terms and conditions set by the Company. Employees and/or eligible dependents may be eligible to participate in the following Company-sponsored employee benefit programs: medical; dental; vision; life/AD&D insurance; short- and long-term disability; fertility and family-forming assistance; wellbeing allowance; educational assistance; mental health coaching/therapy; tax advantaged accounts such as HSA and healthcare/dependent care FSAs; a 401(k) retirement plan; and time off benefits that include vacation, sick time, and personal days.

We Consider Applicants For All Positions On The Basis Of Merit, Qualifications And Business Needs, And Without Regard To Race, Color, National Origin, Religion, Sex, Gender Identity, Age, Disability, Alienage Or Citizenship Status, Ancestry, Marital Status, Creed, Genetic Predisposition Or Carrier Status, Sexual Orientation, Veteran Status, Familial Status, Status As A Victim Of Domestic Violence Or Any Other Status Or Characteristic Protected By Applicable Federal, State, Or Local Law.

The NBA is committed to providing a safe and healthy workplace. To safeguard our employees and their families, our visitors, and the broader community from COVID-19, and in consideration of recommendations from health authorities and the NBA’s own advisors, any individual working onsite in our New York and New Jersey offices must be fully vaccinated against COVID-19. The NBA will discuss accommodations for individuals who cannot be vaccinated due to a medical reason or sincerely held religious belief, practice, or observance.

About the NBA

The National Basketball Association (NBA) is a global sports and media organization with the mission to inspire and connect people everywhere through the power of basketball. Built around five professional sports leagues: the NBA, WNBA, NBA G League, NBA 2K League and Basketball Africa League, the NBA has established a major international presence with games and programming available in 214 countries and territories in 60 languages, and merchandise for sale in more than 200 countries and territories on all seven continents. NBA rosters at the start of the 2024-25 season featured a record-tying 125 international players from a record-tying 43 countries. NBA Digital’s assets include NBA TV, NBA.com, the NBA App and NBA League Pass. The NBA has created one of the largest social media communities in the world, with more than 2.3 billion likes and followers globally across all leagues, team and player platforms. NBA Cares, the NBA’s global social responsibility platform, partners with renowned community-based organizations around the world to address important social issues in the areas of education, inclusion, youth and family development, and health and wellness.