Senior Director, Privacy and Data

Hungry, Humble, Honest, with Heart

The Opportunity

We are seeking a strategic, business-first Senior Director, Privacy & Data Legal to lead Nutanix’s global privacy and data legal function, overseeing a team of three privacy professionals.

The ideal candidate is a data-driven builder with experience leading privacy and data programs at public enterprise technology companies. They will influence AI enablement at the executive level, create visibility and measurable progress, and balance legal, technical, and regulatory requirements to deliver practical business outcomes.

What You’ll Do

Lead global privacy and data strategy

Set the vision, priorities, and operating model for Nutanix’s global privacy, data, and AI governance programs.

Advise executive leadership and senior stakeholders across Product, Engineering, Security, Sales, Procurement, Marketing, HR, Finance, and Compliance.

Lead and develop a global team of privacy counsel and program professionals.

Clarify ownership, decision rights, escalation paths, service expectations, and operating rhythms.

Build visibility, velocity, and accountability

Create visibility into privacy and data work across Product, Commercial, Procurement, Security, and enterprise workflows.

Establish risk-tiered intake, triage, routing, escalation, and approval processes.

Build metrics and dashboards covering demand, cycle time, queue health, rework, handoffs, risk, adoption, and business impact.

Use workflow design, automation, and AI to improve quality, reduce rework, and accelerate routine activities.

Continuously improve processes, technology, team capacity, and stakeholder engagement.

Enable responsible AI

Lead the legal function supporting Nutanix’s enterprise AI governance program.

Advise on AI products, internal use cases, enterprise data access, model governance, vendor AI capabilities, and customer commitments.

Drive AI enablement within Legal through AI-assisted research, intake, assessments, contracting, knowledge management, and workflow automation.

Establish controls for data provenance, access, retention, confidentiality, human review, monitoring, and auditability.

Help the business adopt AI responsibly without making Legal or Privacy a bottleneck.

Support customers, products, partners, and commercial growth

Advise Product, Engineering, Security, and Go-to-Market teams on privacy-by-design, product launches, AI features, data use, and regulatory requirements.

Support customer-facing privacy matters, including security and privacy questionnaires, customer diligence, trust reviews, and strategic escalations.

Support negotiations with customers, partners, OEMs, resellers, and vendors involving privacy, AI, security, confidentiality, data transfers, and regulatory obligations.

Advise on and, as needed, negotiate DPAs, privacy terms, AI provisions, security exhibits, data-sharing arrangements, and related agreements.

Help the business address customer expectations regarding certifications, controls, data residency, data sovereignty, and responsible AI.

Strengthen data governance and risk management

Oversee data mapping, records of processing, data inventories, classification, retention, deletion, access, and data lifecycle programs.

Ensure completion of PIAs, DPIAs, TIAs, AI risk assessments, and other risk reviews.

Build scalable privacy review processes for vendors and procurement.

Partner with Security and Compliance on ISO 27001, ISO 27701, SOC 2, and other certifications and audits.

Advise on incident response, breach preparedness, regulatory inquiries, investigations, and remediation.

About the Team

Nutanix Legal is a global team of business-minded legal professionals working at the intersection of technology, risk, and business enablement. We are building a data-driven, technology-enabled organization that uses risk-based frameworks, automation, metrics, and AI to help the business make better decisions and move with confidence.

Known for our agility, integrity, and collaborative spirit, we advance Nutanix’s global impact with one goal: Legal as a Competitive Advantage.

Our Commercial, Product, and Privacy Legal team partners across Sales, Product, Engineering, Security, HR, Procurement, IT, Marketing, Compliance, and Partnerships. We support commercial transactions, product development, privacy, AI governance, data protection, vendor risk, customer commitments, regulatory readiness, and enterprise risk.

What You Will Bring

J.D. and admission to practice in at least one U.S. jurisdiction.

15+ years of relevant experience in privacy, data protection, technology, cybersecurity, AI governance, and regulatory law.

Prior experience leading a global privacy team.

Significant in-house experience at a public enterprise technology company.

Experience leading and developing privacy, legal, data, compliance, or risk professionals.

Deep knowledge of U.S. and international privacy and data protection laws, emerging AI regulation, and digital sovereignty.

Demonstrated success influencing and executing AI enablement across an enterprise, within products, and within a Legal, Compliance, Privacy, or Risk organization.

Strong understanding of enterprise technology, cloud computing, SaaS, hybrid multicloud environments, cybersecurity, and data lifecycle management.

Experience advising on customer, partner, OEM, reseller, and vendor negotiations involving privacy, AI, security, and data use.

Experience with privacy-by-design, data mapping, ROPA, PIAs, DPIAs, TIAs, AI risk assessments, incident response, and regulatory engagement.

Experience partnering with Security and Compliance on ISO, SOC, and comparable certification programs, with familiarity with DORA, NIS2, CSA, FedRAMP, and similar frameworks.

Ability to build scalable operating models, processes, metrics, dashboards, and risk-tiered workflows.

Strong business judgment, executive presence, and ability to influence without relying solely on formal authority.

Practical, collaborative, customer-oriented approach with a bias toward action.

Track record of building durable programs, implementing change, and engaging at the ground level when needed—not simply administering existing processes.

Experience leading privacy and responsible AI programs in enterprise technology, cloud, cybersecurity, or infrastructure companies.

Experience with OneTrust, ServiceNow, Jira, or comparable privacy and workflow platforms.