Irving, TX | Full-Time | In-Office
Enable Innovation. Shape the Future.
7-Eleven, Inc. is seeking a visionary Senior Director-level leader, Chief Privacy Officer (CPO) to lead 7-Eleven, Inc.’s enterprise privacy, data protection, data governance, records retention, cybersecurity, and serve as the privacy and data-protection lead within the enterprise AI governance program. Reporting to the VP, Associate General Counsel & Chief Compliance Officer, this leader will play a critical role in helping the company leverage data and emerging technologies responsibly while maintaining the trust of millions of customers.
Working across Legal, Compliance, IT, Information Security, Digital, and many business teams, the CPO will drive enterprise-wide privacy and responsible data strategy, oversee compliance with evolving regulations, and champion responsible AI practices that support innovation and growth.
This is a unique opportunity to shape enterprise strategy at one of the world's most recognized brands. You will influence how data, privacy, cybersecurity, records retention, and AI drive innovation across a global organization while protecting the trust that powers our business.
What You'll Do:
Privacy, Compliance & Governance
- Lead and advance the enterprise privacy, data protection, and governance program.
- Ensure compliance with global privacy, cybersecurity, data protection, and emerging AI regulations.
- Monitor regulatory developments and advise leadership on business impact and risk.
- Establish and oversee privacy policies, standards, controls, and governance frameworks.
- Co-chair cross-functional governance committees and drive enterprise accountability.
- Partner with business and technology teams to embed Privacy by Design and responsible data practices across the organization.
- Translate new regulatory requirements into engineering-ready privacy controls and reusable patterns within a committed timeframe.
Data Protection, Information Governance, & Risk Management
- Lead privacy risk assessments, data protection impact assessments, AI/data impact reviews, compliance audits, and remediation plans.
- Oversee data lifecycle management, including, but not limited data mapping, retention, transfer, and deletion practices.
- Partner with Information Security, Technology, and Legal teams to strengthen privacy and security controls and mitigate risk.
- Support privacy-related incident response and regulatory reporting requirements.
- Advise leadership on information governance, data stewardship, and emerging technology risks.
Third-Party & Vendor Oversight
- Establish and manage privacy, data protection, AI, and records retention reviews for vendors, partners, and other third parties.
- Partner with Legal, Procurement, Information Security, and business stakeholders to incorporate privacy, cybersecurity, data use, AI, retention, audit, and incident-response requirements into contracts, onboarding, and ongoing third-party governance.
- Oversee third-party compliance monitoring, vendor risk assessments, due diligence, remediation, and escalation for high-risk processing, AI systems, data transfers, and sensitive data use.
Artificial Intelligence Governance
- Serve as the privacy and data-protection lead on the enterprise AI Governance Counciland responsible AI framework.
- Advise business and technology leaders on AI risk, privacy, cybersecurity, compliance, responsible innovation, and other relevant areas.
- Partner with the AI Governance Council to develop and maintain AI governance policies, standards, and controls aligned with applicable law and relevant frameworks.
- Assess and mitigate legal, ethical, operational, and reputational risks associated with AI technologies.
- Coordinate AI literacy, governance readiness, and compliance activities for emerging global AI obligations, including the EU AI Act, where applicable.
Training & Awareness
- Lead enterprise training and awareness programs focused on privacy, data protection, records and information governance, cybersecurity awareness, and responsible AI.
- Promote a culture of compliance, accountability, cybersecurity awareness, data stewardship, and responsible innovation across the organization.
Executive & External Engagement
- Serve as a primary advisor to executive leadership and the Board on privacy, data governance, and AI-related matters.
- Represent the company with regulators, industry groups, and external stakeholders.
- Partner with Legal and Corporate Communications on privacy, cybersecurity, data governance, AI, regulatory, incident, and customer trust communications.
Team Leadership
- Lead privacy teams and drive cross-functional collaboration to advance enterprise privacy and data governance objectives.
Required Qualifications
- Juris Doctor (JD) is required from an accredited law school.
- 10+ years of experience in privacy, data protection, compliance, cybersecurity, or technology law, including significant enterprise leadership responsibility.
- Deep knowledge of U.S. and international privacy and data protection laws and regulations, including GDPR, CCPA/CPRA, U.S. state privacy laws, and other global data protection frameworks.
- Experience developing and implementing AI governance frameworks and responsible AI programs.
- Knowledge of AI risk management, model governance, privacy implications of AI systems, and emerging AI regulations.
- Relevant AI and responsible innovation training or certifications preferred.
- Demonstrated experience building, maturing, and leading enterprise privacy, compliance, data governance, or responsible technology programs.
- Strong understanding of data governance, information security, cloud technologies, cybersecurity risks, and emerging technologies.
- Experience advising executive leadership on regulatory, compliance, and technology-related matters.
- Proven ability to influence stakeholders, lead cross-functional initiatives, and drive practical risk-based decisions in a complex, fast-paced environment.
- Exceptional communication, collaboration, and strategic leadership skills.
Preferred Qualifications
- IAPP certification such as CIPP/US, CIPP/E, CIPM, CIPT, or Artificial Intelligence Governance Professional (AIGP) strongly preferred.
- Relevant AI governance, responsible innovation, cybersecurity, records management, or information governance training or certifications preferred.
#LI-KA1
