• Operationalize privacy and governance policies through procedures, playbooks, and workflows. • Manage data subject rights requests (access, deletion, correction, opt-out). • Partner with IT and Security to enforce retention schedules, deletion processes, and records management. • Run Privacy Risk Management including Privacy Impact Assessments (PIA) and maintaining the Records of Processing Activities (RoPA). • Run DPIAs, LIAs, and other risk assessments; maintain risk registers. • Coordinate incident response with Security and Legal. • Monitor compliance metrics and prepare reports for leadership. • Deliver privacy and information governance training to employees. • Serve as first-line contact for business teams on privacy and data handling questions.