KIA

At Kia, we’re creating award-winning products and redefining what value means in the automotive industry. It takes a special group of individuals to do what we do, and we do it together. Our culture is fast-paced, collaborative, and innovative. Our people thrive on thinking differently and challenging the status quo. We are creating something special here, a culture of learning and opportunity, where you can help Kia achieve big things and most importantly, feel passionate and connected to your work every day.

Kia provides team members with competitive benefits including premium paid medical, dental and vision coverage for you and your dependents, 401(k) plan matching of 100% up to 6% of the salary deferral, and paid time off. Kia also offers company lease and purchase programs, company-wide holiday shutdown, paid volunteer hours, and premium lifestyle amenities at our corporate campus in Irvine, California.

Status

Exempt

Summary

The Data Privacy Director develops, implements, and oversees a data privacy strategy across all Kia North America affiliates, ensuring compliance with applicable regulations. This role drives decision-making related to data privacy for multiple organizations and collaborates closely with the Legal team to resolve privacy issues and update corporate policies and procedures.

This position will lead risk assessments, implement internal controls, and foster data protection awareness through training. This role will collaborate with IT, Information Security, and Legal teams to integrate privacy practices and oversee data privacy incident response to ensure proper remediation. The Director will take a hands-on approach within this small team while designing processes and policies that align with the needs of multiple organizations and can be scaled effectively as additional resources become available.

Major Responsibilities

1st Priority - 20%

Leadership & Strategy

• Develop and execute a comprehensive data privacy strategy aligned with organizational goals.
• As the executive lead for Data Privacy Strategy, the Director will serve as the primary liaison for privacy matters and overseeing related teams across Kia North America affiliates to ensure compliance and risk mitigation.
• Lead the effort to resolve privacy issues by closely collaborating with Legal, providing specific solutions, making decisions, and reporting progress.

2nd Priority - 20%

Compliance & Risk Management

• Responsible for corporate compliance with all applicable privacy laws and regulations (e.g., CPRA and other state laws).
• Conduct regular risk assessments and audits and recommend mitigation strategies.
• Design and oversee the implementation of a comprehensive internal control and monitoring framework to proactively mitigate risks, prevent the leakage, misuse, and abuse of Personally Identifiable Information (PII), and ensure enterprise-wide data protection compliance.
• Review and approve/deny all requests for data privacy policy exceptions

3rd Priority - 20%

Policy Development

• Develop, implement, and maintain privacy policies that are aligned with applicable regulations and ensure effective procedures are in place to safeguard personal data.

4th Priority - 20%

Incident Response

• Oversee response to privacy breaches and ensure appropriate remediation for all Kia North America affiliates
• Develop an incident response plan that addresses potential privacy violations.

5th Priority - 10%

Training & Awareness

• Develop and implement privacy training programs for employees and stakeholders.
• Promote awareness of privacy best practices and the importance of data protection within the organization.

6th Priority - 10%

Collaboration & Communication

• Work closely with IT, Information Security, Legal, and other departments to ensure integrated privacy practices.
• Liaise with regulatory authorities and manage privacy-related inquiries or incidents.

Education/Certification

• Bachelor’s degree in law, computer science, information technology or security, business administration, or a related field required.
• Advanced degree (e.g., JD, MBA) preferred.
• Professional certifications such as CIPP, CIPM, or similar are highly desirable.

Overall Experience

• Minimum of 15+ years of experience in privacy, data protection, or compliance roles required.

Directly Related Experience

• 5+ years of experience in a senior leadership position required.
• Proven track record of developing and implementing privacy strategies in a complex organization.
• In-depth knowledge of US/states privacy laws and regulations such as CCPA, CPRA, HIPAA, etc.
• In-depth knowledge of International Privacy Standards such as GDPR and ISO 27701
• Familiarity with Canadian and Mexican privacy laws and regulations.

Skills

Ability to manage department level teams.

Ability to manage and direct resources.

Ability to plan, coordinate, and direct in a complex organizational environment.

Excellent communication and interpersonal skills, with the ability to influence stakeholders at all levels.

Strong analytical and problem-solving skills with a keen attention to detail.

Competencies

Care for People

Chase Excellence, Every Day

Dare to Push Boundaries

Empower People to Act

Move Further, Together

Pay Range

$174,282 - $260,007

Pay will be based on several variables that are unique to each candidate, including but not limited to, job-related skills, experience, relevant education or training, etc.

Equal Employment Opportunities

KUS provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, ancestry, national origin, sex, including pregnancy and childbirth and related medical conditions, gender, gender identity, gender expression, age, legally protected physical disability or mental disability, legally protected medical condition, marital status, sexual orientation, family care or medical leave status, protected veteran or military status, genetic information or any other characteristic protected by applicable law. KUS complies with applicable law governing non-discrimination in employment in every location in which KUS has offices. The KUS EEO policy applies to all areas of employment, including recruitment, hiring, training, promotion, compensation, benefits, discipline, termination and all other privileges, terms and conditions of employment.

Disclaimer: The above information on this job description has been designed to indicate the general nature and level of work performed by employees within this classification and for this position. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.

Nearest Major Market: Irvine California

Nearest Secondary Market: Los Angeles

Job Segment: Compliance, Information Security, Law, Computer Science, MBA, Legal, Technology, Management

Read Full Description