SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 120,000 - 179,500 / annual
Hippo is a tech-native insurance carrier platform that partners with MGAs to deliver tailored program solutions. The company is seeking a Data Privacy, Cybersecurity & AI Compliance Manager to design, build, and mature its enterprise compliance program across data privacy, cybersecurity, and AI governance.
You will report to the Sr. Enterprise Compliance Director and own multiple compliance workstreams:
**Privacy Program Build & Ownership:** Design and build Hippo's enterprise data privacy compliance program, maturing it from operational footing into a documented, auditable program. This includes governance and accountability structure, data inventory and records of processing, privacy impact assessment process, policy framework, program metrics, and regulatory change management covering CCPA/CPRA, other state privacy laws, and insurance-specific privacy requirements (GLBA and state insurance privacy laws).
**Privacy Operations & Consumer Rights:** Own Hippo's privacy mailbox and consumer rights request process end-to-end—intake, verification, tracking, and timely response to access, deletion, correction, and opt-out requests, with documentation sufficient to withstand regulatory scrutiny.
**Marketing & Advertising Compliance:** Own compliance for marketing and outreach channels, including TCPA/telemarketing and SMS consent requirements (CTIA messaging standards, consent capture and logging, opt-out handling), CAN-SPAM, and website tracking technologies (cookies, pixels, session replay) and consent management. Partner with Marketing and Growth teams on campaign and disclosure review.
**Cybersecurity Regulatory Compliance:** Support compliance with insurance-specific cybersecurity regulations, including the NYDFS Cybersecurity Regulation (23 NYCRR 500) and the NAIC Insurance Data Security Model Law. Work alongside InfoSec on incident response and regulatory reporting.
**AI Governance & Compliance:** Build and mature Hippo's AI governance program against emerging AI regulations (Colorado AI Act, EU AI Act, NAIC AI model bulletins) and internal AI use cases.
**Cross-Functional Partnership:** Translate complex regulatory requirements into practical, operational compliance programs. Partner across Legal, Security, Engineering, Marketing, and the business to keep Hippo ahead of a fast-moving regulatory landscape. Run day-to-day privacy operations, work live security incidents, and write quarterly reports for board committees.
**Requirements:**
- Compliance professional with deep expertise at the intersection of data privacy, cybersecurity, and AI governance
- Experience building or maturing compliance programs against CCPA/CPRA, other state privacy laws, TCPA, NYDFS Cybersecurity Regulation (23 NYCRR 500), NAIC Insurance Data Security Model Law, and emerging AI regulations
- Comfortable with day-to-day privacy operations, security incident response, and board-level reporting
- Detail-oriented and skilled at managing multiple regulatory threads simultaneously
- Strong ability to partner across Legal, Security, Engineering, Marketing, and business teams
- Insurance industry experience is a strong plus
- Not required to be an attorney, but must know when issues need Legal interpretation or sign-off
