Senior Director, Privacy Governance & Compliance

Job Description Summary:

At The Coca-Cola Company, earning consumer trust through responsible data use is a cornerstone of our growth strategy. As innovation accelerates and data-driven engagement expands globally, we must continually strengthen privacy governance, align regulatory expectations with operational execution, and deliver consistent compliance across markets.

The Senior Director, Privacy Governance & Compliance leads this mission by designing Coca-Cola’s global privacy governance framework, setting strategic objectives for program maturity, and managing enterprise privacy controls with discipline and clarity. This role aligns legal interpretation with practical implementation, ensures governance routines create accountability and issue visibility, and enables leadership decisions based on accurate, actionable reporting.

This is a rare opportunity to lead enterprise privacy governance at scale, influence regulatory readiness globally, and develop talent within an evolving privacy organization. If you thrive on structure-building, risk management, and enabling responsible innovation across a complex matrix, this role offers real impact.

What You’ll Do for Us

• Set the Strategic Privacy Controls Framework:
  • Design, maintain, and refresh the global privacy controls framework, including objectives, control ownership, evidence standards, escalation triggers, and maturity metrics.
• Define Annual OKRs and Maturity Priorities:
  • Establish annual objectives and key results for the Privacy Office aligned to program maturity, enterprise risk priorities, and compliance expectations.
• Lead Governance Agenda and Operating Rhythms:
  • Organize quarterly and annual governance cadences across Privacy Office, Privacy Services, Data Governance, and privacy counsel partners to reinforce accountability and alignment on priorities, metrics, and decision forums.
• Translate Regulatory Expectations into Actionable Governance:
  • Convert legal guidance from privacy counsels into scalable operating requirements, playbooks, training inputs, and controls—while preserving counsel ownership of legal interpretation.
• Manage and Develop Team Talent:
  • Lead two direct reports, defining priorities, coaching for performance, and driving accountability for execution and measurable program improvements.
• Enable Global Alignment:
  • Synchronize governance requirements with Privacy Services and Data Governance teams to operationalize controls through dashboards, service standards, and automation.
• Embed Privacy in Enterprise Processes:
  • Partner across Legal, Marketing, Cybersecurity, Digital, Procurement, HR, and Operating Units to incorporate privacy controls into high-impact business processes and technology initiatives.
• Drive Reporting and Insight:
  • Define OKR progress, develop KRIs and KPIs, and maintain dashboards that inform leadership of privacy compliance levels, risks, and maturity roadmap status.
• Lead Remediation, Regulatory Monitoring, and Transformation:
  • Coordinate privacy control uplift plans, readiness workstreams, and remediation plans; expand the Resilient Privacy compliance process for global scalability.
• Support Leadership Decision-Making:
  • Deliver clear, concise executive updates to governance committees and senior stakeholders, focusing on operational outcomes and continuous improvement.

Qualifications & Requirements

• 10+ years of experience in privacy, data governance, compliance, risk management, legal, audit, or related disciplines—preferably in a global or highly regulated enterprise environment.
• Demonstrated leadership of privacy governance frameworks, program maturity roadmaps, control design, and enterprise-wide compliance routines.
• Experience with setting annual OKRs, governance agendas, and operating rhythms for complex, cross-functional programs.
• Strong working knowledge of global privacy laws and regulatory trends, with proven ability to partner effectively with privacy counsel on interpretation.
• Expertise in translating regulatory requirements into operational controls, risk metrics, and implementation guidance.
• Skilled in influencing senior stakeholders, driving alignment across matrixed environments, and managing competing priorities calmly and effectively.
• Exceptional communication skills; ability to distill regulatory, technical, and operational complexity into actionable guidance for diverse audiences.
• Relevant certifications such as CIPM, CIPP/E, CIPP/US, PMP, PgMP, privacy engineering, audit, or risk management preferred but not required.
• Demonstrated ability to lead, coach, and develop high-performing teams.

Leadership Expectations

• Enterprise Mindset: Balance privacy risk management with operational scalability and business enablement.
• Alignment through Governance: Use OKRs, metrics, meeting structures, and decision forums to create clarity and accountability enterprise-wide.
• Build and Lead a High-Performing Team: Set priorities, coach talent, and foster an environment of disciplined execution.
• Simplify Complexity: Translate legal and regulatory ambiguity into structured governance frameworks and clear deliverables.
• Own Outcomes: Drive measurable improvements in privacy maturity, readiness, and reporting quality.

What We’ll Do for You

• Purpose-Driven Work: Shape Coca-Cola’s global approach to responsible data use and regulatory readiness.
• Enterprise Visibility: Lead governance initiatives that directly impact brand trust and regulatory compliance.
• Global Influence: Collaborate with senior stakeholders and privacy networks across multiple geographies and functions.
• Career Growth: Gain experience in enterprise program leadership at the intersection of law, technology, and business innovation

The Coca-Cola Company will not offer sponsorship for employment status (including, but not limited to, H1-B visa status and other employment-based nonimmigrant visas) for this position. Accordingly, all applicants must be currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States.

Skills:

Compliance, Data Privacy, Enterprise Risk Management (ERM), Global Privacy, Privacy Compliance

Pay Range:

United States: 201,000 - 243,000 USD

Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered.

Annual Incentive Reference Value Percentage:

30

Annual Incentive reference value is a market-based competitive value for your role. It falls in the middle of the range for your role, indicating performance at target.

Location(s):

United States of America

City/Cities:

Atlanta

Travel Required:

00% - 25%

Relocation Provided:

No

Job Posting End Date:

September 4, 2026

Our Purpose and Growth Culture:

We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what’s possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors – curious, empowered, inclusive and agile – and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.