VP, Privacy

About this role

Why Work at Mercer Advisors?

For more than 40 years, Mercer Advisors has been helping families amplify and simplify their financial lives by integrating financial planning, investment management, business management, tax, estate, insurance, and more, all managed by a single team. We deliver the kind of comprehensive care once reserved for only the wealthiest households.

Today, we serve over 31,300 families across 90+ cities across the U.S. Ranked the #1 RIA Firm in the nation by Barron’s for two consecutive years, Mercer Advisors is an independent fiduciary legally bound to act in our clients’ best interests — always.*

Mercer Advisors offers a workplace that stands apart in the financial industry. More than half of our employees and client-facing professionals are women, reflecting the clients we serve. With a flexible, national footprint, we build our teams around exceptional talent — wherever they are.

Join us and help families amplify and simplify their financial lives with confidence.

* Mercer Advisors was ranked #1 for RIA firms with up to $70 billion in assets. The Barron’s top RIA ranking is based on a combination of metrics – including size, growth, service quality, technology, succession planning and others. No fee was paid for participation in the ranking, however, Mercer Advisors has paid a fee to Barron’s to use the ranking in marketing. Please see important information about the ranking criteria methodology here .

Job Summary:

The Vice President, Privacy develops and implements policies, governance structures, and operational processes resulting in the responsible collection, use, storage, and protection of personal data. The Vice President, Privacy reports into the Legal Department, while partnering with Compliance, Technology, the People Team, Marketing, and executive leadership to embed privacy into business strategy and operations.

This position will be a strategic contributor to company direction and growth. The position will be adept in stakeholder management and an articulate internal and external communicator. They will have the ability to explain complex issues concisely and answer questions with appropriate detail and understanding.

This role requires strong communication, leadership, and executive presence when representing the firm with executives, employees, and other key parties. The position will work hand in hand with the General Counsel to push for broader, deeper strategic thinking and must be able to deliver compelling ideas in a room with some of the industry’s most experienced and innovative executives.

Essential Job Functions for this role include:

• Privacy Strategy & Governance: Define and execute a comprehensive privacy strategy aligned with business goals, regulatory requirements, and industry best practices.

• Regulatory Compliance: Responsible for compliance with global privacy laws (e.g., SEC Regulation S‑P, GLBA, CCPA/CPRA, GDPR, PIPEDA, state-level privacy laws), including AI tools, models, and workflows. Monitor regulatory changes and lead organizational readiness.

• Policy Development: Create, maintain, and enforce privacy policies, standards, and data-handling procedures across the enterprise, and develop and report on compliance metrics.

• Risk Management: Lead privacy risk assessments, DPIAs, vendor risk reviews, and audits. Identify gaps and drive remediation.

• AI Policies and controls: Develop and implement AI‑specific data‑handling policies and controls, including rules for input restrictions, redaction, anonymization, retention, and secure storage of AI‑generated or AI‑processed data, as well as controls for access management, monitoring, and employee training on safe and compliant AI usage.

• Data Protection Operations: Oversee processes for data subject rights, consent management, data retention and deletion, breach response, privacy-by-design, and use of data in AI.

• Incident Response Leadership: Assist in managing response to privacy incidents, coordinating with security and communications teams.

• Cross-Functional Collaboration: Partner with Compliance, Technology, the People Team, and Marketing to embed privacy into systems, products, and workflows.

Knowledge, Skills, and Abilities:

• 10+ years of experience in privacy, data protection, compliance, cybersecurity, or related fields.

• Deep knowledge of global privacy regulations and frameworks (GDPR, CCPA/CPRA, NIST Privacy Framework, ISO 27701).

• Proven leadership experience building or scaling privacy programs.

• Strong understanding of data governance, information security, and risk management.

• Exceptional communication skills with the ability to influence at all levels.

• J.D. from an accredited law school is highly preferred.

• Certifications such as CIPP/E, CIPP/US, CIPM, CIPT, or equivalent are highly preferred.

Preferred Skills & Attributes:

• Strategic thinker with the ability to balance risk, compliance, and business needs.

• Experience working in highly regulated industries (healthcare, finance, technology, government).

• Ability to translate complex legal and technical concepts into clear business guidance.

• Strong crisis management and incident response capabilities.

• Demonstrated success leading cross-functional teams.

Work Schedule:

This professional role requires availability during standard business hours of Monday through Friday from 8AM to 5PM. At times, the role may have early or late hours to meet business tasks and deadlines for external and internal client needs.

All roles classified as a non-exempt are required to record working time into the timekeeping system daily at the start and end of each workday plus a 30-minute unpaid lunch period.

Working Conditions:

This position may be in a professional office environment or a dedicated home office workspace which is free of interruptions. Whether position is in a dedicated office space or home office workspace, basic technology needs will be provided to satisfy positi

Similar jobs

• VP, Data — Updater · Remote
• VP, Legal — Duck-duck-go · Remote
• VP, Legal — Duettoresearch · United States
• VP, Compliance — Amylyx · Cambridge, MA
• VP, People — Plasmidsaurus · San Francisco
• VP, People — Nanit · New York, NY (Hybrid)
• VP, People — Kairospower · Alameda, CA
• VP, Information Technology — Bestow · Dallas, TX