The General Data Privacy & AI Lead is a senior expert role responsible for designing, implementing, and independently operating the Company’s global privacy and data protection program, while leading the day-to-day administration and continued development of the Company’s AI governance framework in coordination with the AI Governance Committee and Technical Working Group. The role has a strong emphasis on the General Data Protection Regulation (GDPR), U.S. state privacy laws, the Health Insurance Portability and Accountability Act (HIPAA), and emerging international privacy and AI regimes.

The role serves as the principal subject-matter expert on data privacy, data protection, and AI-related regulatory and compliance risks. It is a hands-on individual contributor position requiring deep technical and regulatory fluency, sound judgment, and the ability to operate autonomously while influencing stakeholders across Legal, IT, Information Security, Engineering, HR, Procurement, Operations, Internal Audit, and the broader business.

Key Responsibilities

- Design, implement, and continuously mature Forward Air’s company-wide privacy and data protection program in alignment with GDPR, CCPA/CPRA, HIPAA, and emerging global privacy regulations.
- Own the development, implementation, and maintenance of privacy governance elements and administer the operational components of the Company’s AI governance framework, including policies, standards, standard operating procedures, records of processing activities, AI inventories, risk-classification processes, and internal guidance.
- Independently lead privacy risk assessments, including data protection impact assessments, transfer impact assessments, data-mapping exercises, data-subject rights workflows, and third-party privacy reviews,



using scalable and programmatic approaches.
- Identify, assess, document, and support the mitigation of privacy and AI-related risks associated with data flows, analytics, automation, AI-enabled systems, vendors, and cross-border data transfers.
- Advise on responsible AI, automated decision-making, and advanced analytics, translating applicable legal, regulatory, ethical, and governance expectations into practical operational controls.
- Administer the AI-use-case intake, inventory, risk-classification, assessment, monitoring, and escalation processes; coordinate cross-functional review through the Technical Working Group; and prepare material, high-risk, or exception matters for AI Governance Committee consideration.
- Partner with IT, Information Security, Engineering, HR, Procurement, and business teams to embed privacy-by-design, security-by-design, transparency, proportionality, and data-minimization principles into systems, workflows, procurement processes, and product or service lifecycles.
- Define privacy and AI governance requirements and partner with accountable business, technology, records, and security owners to implement and mature controls covering data retention, deletion, access management, consent and preference management, data classification, data sharing, and third-party integrations.




- Serve as the primary privacy compliance lead for regulatory inquiries, audits, customer assessments, and applicable assurance or certification activities, including relevant privacy criteria under SOC 2, ISO/IEC 27701, and HIPAA-related reviews, where applicable, ensuring audit readiness and timely, coordinated responses.
- Collaborate with Internal Audit, Ethics & Compliance, Legal, and Information Security to assess control effectiveness, support remediation of identified gaps, and track privacy and AI governance program maturity and risk trends.
- Provide expert privacy and compliance guidance on incident preparedness and response, including supporting breach-notification analysis, data-subject communications, and regulatory engagement, in coordination with Legal and Information Security.
- Act as a trusted advisor to senior leadership on evolving privacy, AI, and data-governance risks, translating regulatory and market developments into actionable business guidance.
- Develop and deliver targeted privacy and AI governance training and awareness programs for employees and relevant third parties to promote ethical data use, responsible AI practices, and accountability.
- Define and implement scalable monitoring, reporting, evidence-collection, and recordkeeping mechanisms by leveraging privacy and governance, risk, and compliance tools, dashboards, workflows, and automation.
- Maintain current knowledge of global legal and regulatory developments, enforcement trends, industry standards, and emerging risks, and proactively advise on their potential impact on Forward Air’s operations.
- Support adjacent ethics, compliance, technology-governance, and regulatory initiatives as reasonably required, demonstrating flexibili

📌 Global Data Privacy (Ciudad de México)
🏢 Forward Air
📍 Ciudad de México