Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 13 hours agoWe saw it 49 min after it went up

Data Privacy, Cybersecurity & AI Compliance Manager

Hippo Insurance23 open roles

Where
Austin, Texas, United States; Dallas, Texas, United States; Morristown, New Jersey, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowData Privacy, Cybersecurity & AI Compliance ManagerHippo Insurance · Austin, Texas, United States; Dallas, Texas, United States; Morristown, New Jersey, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Hippo Insurance's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.0% of postings close within 7 days. Measured by our own scanner across the market. Hippo Insurance postings stay open a median of 39 days.

Share of postings closed within
  1. 1.6%1 day
  2. 3.6%3 days
  3. 8.0%7 days
  4. 15.0%14 days
  5. 34.2%30 days
This job: posted 13 hours ago

Hippo Insurance median: 39 days open

The posting

Title: Data Privacy, Cybersecurity & AI Compliance Manager

Location: Austin, TX / Dallas, TX / Morristown, NJ (Hybrid)

Reporting to: Sr. Enterprise Compliance Director

About Hippo:

Hippo was built on a promise: make homeownership effortless. Nearly a decade later, that mission still drives us. We use technology and data to help our customers stay ahead of problems and protect what matters most.

Today, that same tech-native approach powers our work beyond homeowners. Hippo operates as a diversified carrier platform, partnering with MGAs to deliver tailored program solutions that help them grow and deliver better customer experiences. Behind that work is a team that values ownership, curiosity, collaboration, and continuous improvement.

If you're energized by building what's next, we'd love to meet you.

About You:

You are a compliance professional who lives at the intersection of data privacy, cybersecurity, and AI governance. You're not necessarily an attorney, but you know how to translate complex regulatory requirements into practical, operational compliance programs, and you know when an issue needs to go to Legal for interpretation or sign-off. You've built or matured compliance programs against frameworks like the CCPA/CPRA and other state privacy laws, the TCPA and related marketing rules, the NYDFS Cybersecurity Regulation (23 NYCRR 500), the NAIC Insurance Data Security Model Law, and emerging AI regulations (e.g., Colorado AI Act, EU AI Act, NAIC AI model bulletins). You're as comfortable running day-to-day privacy operations, working a live security incident alongside InfoSec, or writing a quarterly report for a board committee as you are designing the program those activities live in. Insurance industry experience is a strong plus, since you understand the regulatory overlay carriers and producers face beyond standard corporate compliance. You're detail-oriented, comfortable managing multiple regulatory threads at once, and skilled at partnering across Legal, Security, Engineering, Marketing, and the business to keep Hippo ahead of a fast-moving regulatory landscape.

What You'll Do:

  • Privacy Program Build & Ownership: Design, build, and run Hippo's enterprise data privacy compliance program, maturing it from today's operational footing into a documented, auditable program: governance and accountability structure, data inventory and records of processing, privacy impact assessment process, policy framework, program metrics, and a regulatory change management process covering CCPA/CPRA, other state privacy laws, and insurance-specific privacy requirements (e.g., GLBA and state insurance privacy laws)
  • Privacy Operations & Consumer Rights: Own Hippo's privacy mailbox and consumer rights request process end to end: intake, verification, tracking, and timely response to access, deletion, correction, and opt-out requests, with documentation sufficient to withstand regulatory scrutiny
  • Marketing & Advertising Compliance: Own compliance for marketing and outreach channels, including TCPA/telemarketing and SMS consent requirements (CTIA messaging standards, consent capture and logging, opt-out handling), CAN-SPAM, and website tracking technologies (cookies, pixels, session replay) and consent management; partner with Marketing and Growth teams on campaign and disclosure review
  • Cybersecurity Regulatory Compliance: Support compliance with insurance-specific cybersecurity regulations (NYDFS 23 NYCRR 500, NAIC Insurance Data Security Model Law and state adoptions) and general frameworks (e.g., NIST); support annual certifications, risk assessments, and regulatory exams and audits, and maintain required documentation
  • Cyber Event Handling: Partner with Information Security on the triage, investigation, containment, and resolution of cyber events; own the compliance workstream for each event, including documentation, materiality and notification analysis support (state breach statutes, NYDFS 72-hour reporting), and remediation tracking, escalating legal determinations to counsel
  • AI Governance & Compliance: Build and maintain Hippo's AI compliance framework, including use case intake, risk assessment, inventory, and monitoring for AI/ML systems across the business; track state, federal, and international AI regulation relevant to insurance (algorithmic accountability, AI in underwriting, claims, and pricing, model governance requirements)
  • Vendor & Third-Party Risk: Conduct privacy and data-protection reviews of vendors and third-party service providers, support the data processing agreement process with Legal, and partner with InfoSec on third-party security diligence, including NYDFS Section 500.11 TPSP requirements
  • Policies, Standards & Training: Draft, maintain, and operationalize internal policies, standards, and procedures for data privacy, cybersecurity, and AI use, and develop and deliver company-wide training and awareness on those policies, in coordination with the Sr. Enterprise Compliance Director and Legal
  • Regulatory Liaison Support: Serve as a day-to-day point of contact for regulatory inquiries, exams, and audits touching privacy, cyber, and AI, coordinating responses and escalating legal interpretation questions to attorney oversight
  • Cross-Functional Partnership: Work closely with Legal, Information Security, Engineering, Marketing, and business units to embed privacy, security, and AI compliance requirements into products, processes, and vendor relationships

Must Haves:

  • 5+ years of experience in data privacy, cybersecurity, and/or AI governance compliance within a regulated industry, including hands-on operational experience (consumer rights requests, incident response, marketing compliance), not just policy work
  • Bachelor's degree; one or more relevant certifications strongly preferred: CIPP/US, CIPM, or CIPT (IAPP privacy certifications), AIGP (IAPP Artificial Intelligence Governance Professional), CISSP, CISM, CRISC, or CDPSE
  • Demonstrated experience building or significantly maturing a privacy or compliance program, not solely running an established one
  • Working knowledge of key privacy, marketing, and cybersecurity regulatory frameworks (CCPA/CPRA and other state privacy laws, TCPA, GLBA, NYDFS 23 NYCRR 500, NAIC Insurance Data Security Model Law)
  • Familiarity with the emerging AI regulatory landscape and how it applies to insurance use cases (underwriting, claims, pricing, customer service)
  • Experience supporting security incident response and breach notification analysis in partnership with information security and legal teams
  • Strong written communication skills, including experience preparing reporting for senior management, board, or committee audiences
  • Experienced working in close partnership with legal counsel and knows when to escalate for legal interpretation
  • Strong program and project management skills; able to manage multiple regulatory workstreams simultaneously
  • Insurance industry experience strongly preferred (P&C a plus)
  • Technical aptitude and the ability to quickly learn new technologies and platforms (privacy management, consent management, and GRC tooling a plus)

Nice to Haves:

  • Insurance industry experience strongly preferred (P&C a plus)

Benefits and Perks:

Hippo treats its team members with the same level of dedication and care as we do our customers, which is why we’re fortunate to provide all of our Hippos with:

  • Healthy Hippos Benefits - Multiple medical plans to choose from and 100% employer covered dental & vision plans for our team members and their families. We also offer a 401(k)-retirement plan, short & long-term disability, employer-paid life insurance, Flexible Spending Accounts (FSA) for health and dependent care, and an Employee Assistance Program (EAP)
  • Equity - This position is eligible for equity compensation
  • Training and Career Growth - Training and internal career growth opportunities
  • Flexible Time Off - You know when and how you should recharge
  • Little Hippos Program - We offer 12 weeks of parental leave for primary and secondary caregivers
  • Hippo Habitat - Snacks and drinks available and catered lunches for onsite employees

The Morristown, NJ base pay range for this role is $120,000 - $179,500. Exact compensation may vary based on several job-related factors that are unique to each candidate, including but not limited to: skill set, experience, education/training, location, business needs and market demands.

Hippo is an equal opportunity employer, and we are committed to building a team culture that celebrates diversity and inclusion. Hippo’s applicants are considered solely based on their qualifications, without regard to an applicant’s disability or need for accommodation. Any Hippo applicant who requires reasonable accommodations during the application process should contact the Hippo’s People Team to make the need for an accommodation known.

Applicant & Employee Privacy Notice (CCPA/CPRA)

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Hippo Insurance's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Hippo Insurance's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Hippo Insurance's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.