Director, Privacy Incident Management Team Lead

Job Description:

Director, Privacy Incident Management Team Lead

The Role

Step into a pivotal position where you’ll lead Fidelity’s enterprise‑wide privacy incident response function, overseeing a high‑performing team responsible for end‑to‑end assessment, investigation, and resolution of privacy incidents. In this strategic and operational leadership role, you will shape and execute the vision, processes, and governance structures that ensure Fidelity meets U.S. federal, U.S. state, and global data breach requirements.

You will manage and mentor a team of privacy incident response professionals, ensure excellence and consistency in incident handling, and partner closely with leaders across business, technology, HR, cyber, legal, and risk functions. You will also drive continuous improvement, strengthening incident response processes and delivering insights that support enterprise‑level decision‑making, including reporting, escalation, and trend analysis.

With a focus on supporting Workplace Investing and Human Resources (HR) data incidents, your expertise will empower Fidelity’s teams and contribute to a culture where privacy is paramount.

• Reporting into the Chief Privacy Officer, you will lead, develop, and manage the Privacy Incident Management team, including responsibility for hiring, coaching, performance management, and developing team capabilities.

• Establish and maintain a scalable, consistent operating model for incident management across all business units.

• Set strategic direction for the program and ensure alignment with the company’s broader privacy, cyber, risk, and regulatory strategies.

• Oversee the full lifecycle of privacy incident assessment and response, ensuring thorough and timely triage, investigation, documentation, and resolution.

• Maintain a strong understanding of U.S. federal, U.S. state, and international breach requirements and ensure the team correctly applies regulatory and contractual obligations to notification decisions.

• Identify trends, root causes, and opportunities to strengthen controls, ensuring Fidelity’s privacy posture is continually improving.

• Partner with enterprise teams to drive risk‑reducing solutions informed by incident insights.

• Serve as a subject matter resource for Workplace Investing and HR incidents, helping teams understand obligations, risk implications, and best practices.

• Prepare high‑quality reporting and insights for leadership and governance forums to support transparency and risk reduction.

The Expertise and Skills You Bring

• You bring a strong foundation in privacy and regulatory understanding, with the ability to apply complex requirements to the realities of a financial services environment.

• You are an analytical and thoughtful problem solver who proactively identifies privacy risks and drives effective, strategic mitigation.

• Your strong communication skills and professional demeanor help you collaborate effectively with partners, balance competing priorities, and support teams in making well-informed decisions.

• You work collaboratively through constructive dialogue, adapt to evolving regulatory landscapes, and consistently deliver high‑quality outcomes while managing multiple priorities simultaneously.

• You have demonstrated experience leading teams and managing enterprise‑scale operational functions.

• 7+ years of experience in privacy, compliance, cyber, legal, risk, or related fields; advanced degrees and CIPP/CIPM certifications are highly valued.

Note: Fidelity is not providing immigration sponsorship for this position.

The Team

We are committed to driving innovative privacy, AI and data strategies, education, and compliance initiatives that enable business growth and protect Fidelity, our customers, and associates. We promote the responsible handling of personal information and use of AI to cultivate trust and foster a culture of accountability, transparency, and partnership.

Certifications:

Category:

Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles. Some roles may have unique onsite requirements. Please consult with your recruiter for the specific expectations for this position.

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.