As one of the world’s largest fashion companies with more than 171,000 employees worldwide, H&M is an exciting and dynamic place to pursue a career within the fashion industry. Our business concept is to offer fashion and quality at the best price in a sustainable way and with our fast expansion we are always looking for new talents. Would you like to be part of our team?

 The Security and Data Privacy Coordinator for North America encompasses dual responsibilities of ensuring the safeguarding and security of our data, as well as overseeing our insurance processes and risk mitigation practices that protect our organization. As the Security and Data Privacy Coordinator, you will play a vital role in identifying and remediating both security and data privacy risks, providing advisory to regional management, and managing fleet operations and insurance renewals. The ideal candidate will possess a strong background in risk management, data privacy, and fleet management. 

This position is based in New York, NY within our Controlling Function and reports to our Regional Data Privacy Manager, Americas."

Core Responsibilities includes but is not limited to:

Risk Management

• Identify, assess, and analyze privacy & security risks that could impact our company's operations, assets, and reputation. 
• Develop and implement risk management strategies, policies, and procedures to ensure business continuity and minimize potential vulnerabilities. 
• Conduct regular risk assessments and vulnerability scans to identify and prioritize risks and recommend appropriate risk mitigation measures. 
• Conduct periodic security audits to ensure compliance with security policies, standards, and regulations.  
• Conduct Privacy Impact Assessments (PIAs) for new systems/processes involving personal data. 
• Support local POs in development of Data Processing Agreements (DPAs) for 3rd party engagements and ensure that DPAs are signed by all Data Processors 

Information Privacy and Security

• Partner with privacy Process Owners (POs) to review & maintain up-to-date Record of Processing Agreements that document all regional processes involving personal data.  
• Support Country privacy POs to ensure that appropriate security safeguards are mapped, maintained, and organizational measures are taken for all data processing activities (e.g., review & ensure good privacy & security practices in stores) 
• Ensure that data privacy policies, guidelines, processes, and templates are communicated to relevant privacy stakeholders.  
• Stay updated on local regulatory developments in the privacy space and secure local legal support in each country. 
• Manage Customer and Employee Data Subject Requests (DSRs) to comply with local privacy laws. 
• Support with information sharing and cause analysis following personal data breaches affecting North America. 
• Act as a trusted advisor to management on both cybersecurity and privacy risks and their potential impact on the organization. 
• Stay updated on the latest cybersecurity threats, vulnerabilities, and industry best practices. 
• Conduct Privacy and Security awareness training for employees and promote a culture of data protection and security throughout the organization. 
• Collaborate with IT teams to develop and implement robust security measures, including network security, access controls, and incident response procedures. 

Fleet Management and Insurance Renewals

• Oversee the management of the company fleet, including vehicle maintenance, inspections, and repairs. 
• Coordinate fleet-related activities, such as fuel management, vehicle registrations, and tracking systems. 
• Manage relationships with fleet service providers and ensure compliance with safety and regulatory requirements. 
• Collaborate with finance and procurement teams to ensure timely insurance renewals and manage invoicing for fleet-related expenses. 

What You’ll Need to Succeed:

• Bachelor’s degree in a relevant field, such as Computer Science, Information Security, Risk Management, or Business Administration
• 5 years’ of store or district level management
• Background in Data Privacy and Risk Management
•  Experience with Risk Assessments
  • Privacy Impact Assessments (PTAs), TIAs, Record of Processing Agreements (ROPAs)
  • Implementing business continuity plans based on Security risk assessments
• Working knowledge with multiple lines of Insurance  
• Familiarity with fleet management processes, insurance renewals, and invoicing. 
• Knowledge of relevant data privacy laws (US state laws, Law 25, PIPEDA). 
• Excellent understanding of privacy risks, cybersecurity threats, vulnerabilities, and best practices in both domains. 
• Strong communication skills with the ability to provide privacy & security advisory to management and communicate complex concepts to stakeholders. 
• Strong organizational skills and ability to prioritize and execute multiple projects simultaneously. 
• Detail-oriented mindset with the ability to analyze and mitigate risks effectively. 
• Ability to work independently and collaborate with internal and external cross-functional teams. 
• Solutions-oriented and a self-starter 
• Strong knowledge of the H&M business, privacy & security procedures, policies, and standards. 
• Excellent working knowledge of Microsoft Excel and Word 
• Valid Driver’s  license
• Ability to travel internationally up to 30% of the time

Job Status: Salary, Exempt

EEOC Code: PRO

Compensation:

Hiring Range is $86,804 - $97,655 annually**

This role is eligible for an annual company performance-based bonus

Benefits:

H&M believes in rewarding our employees for their many contributions to our shared success. That’s why we offer a full range of inclusive benefits that enable wellness, both in and outside of work.  We pride ourselves on being a do-good company and we have a comprehensive benefit package that matches that ambition.  Please note, benefits may have eligibility requirements based on employment status.

We offer: 25% Staff Discount - Medical, Pharmacy Vision and Dental Coverage – Employee Assistance Program - Vacation, Wellness, Holiday and Parental Pay – 401K – Commuter Benefits, Health and Dependent Care FSA. Plus, additional Voluntary Benefits.

Our Career site will have more details, click on Benefits at career.hm.com

*This job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities assigned for this job at the company’s discretion.

**H&M, in good faith, believes that this posted range of compensation is the accurate range for this role at this location at the time of this posting. H&M may ultimately pay more or less than the posted range depending on candidate qualifications. This range may be modified in the future.