As an NRG employee, we encourage you to take charge of your career and development journey. We invite you to explore exciting opportunities across our businesses. You’ll find that our dynamic work environment provides variety and challenge. Your growth is key to our ongoing success—take the lead in shaping your career development, goals and future!

NRG is seeking a VP, Data Privacy to join our legal team and lead the management of our Data Security across the organization, including customer privacy. This person would play a pivotal role in managing our data office while managing data regulations across the country. The ideal candidate will be a lawyer with expertise in privacy, security, and financial services that is familiar with the evolving law and regulations around the country, can draft and negotiates data processing and security agreements, as well as think strategically around data usage across our businesses. This position allows you to work out of one of our designated office locations, which include Lehi, UT; Princeton, NJ; Houston, TX; or Washington, DC.

Responsibilities:

ETHICS AND COMPLIANCE:

• Developing a framework/policy for the approach to ethical innovation, covering the ethical use of data and technology

• Convening reviews (where appropriate) of the deployment of new technologies to assess the quality ofdecision-making and the effectiveness of guardrails

• Assist in building and implementing compliance programs to manage potential data and security incidents in accordance with consumer privacy laws

• Structure, draft, review, and negotiate data protection terms in a variety of agreements including customer and vendor agreements

• Data breach prevention and safeguards to ensure NRG complies with government regulations

• Collaborate with the SVP, Data and Technology, and team to ensure alignment between security, privacy and compliance programs including policies, practices, audits, and incident management

DATA PRIVACY:

• Assist in monitoring internal compliance, inform, and advise on data protection obligations, provide advice regarding Data Protection Impact Assessments (DPIAs) and act as a contact point for data subjects and the Information Commissioner

• Develop a comprehensive data privacy strategy for NRG Energy and its various businesses and brands (including Vivint, Reliant, Direct Energy), including monitoring strategy and riskassessments

• Provide guidance and challenging data privacy matters, including strategic decisions with privacyimplications

• Manage the data privacy network and monitoring the implementation of data privacy strategy andregulations

• Track the rapidly changing landscape of data protection laws, regulations, and standards, and translate them into clear requirements and actionable guidance for business and stakeholders

• Perform other duties as assigned

Minimum Qualifications:

• Bachelor's degree and Juris Doctor (JD) ,with specialization in data privacy

• Admitted to practice law and in good standing with relevant bar associations

• 10+ years in data privacy, with a focus on strategic leadership

• Strong leadership skills with a proven track record of people and change management with the ability to provide vision and strategic direction

• Deep expertise in ethics and data privacy

Preferred Qualifications:

• Experience at an enterprise company

• Experience working across different industry, including, but not limited to: energy, consumer services, etc

NRG Energy is committed to a drug and alcohol-free workplace. To the extent permitted by law and any applicable collective bargaining agreement, employees are subject to periodic random drug testing, and post-accident and reasonable suspicion drug and alcohol testing. EOE AA M/F/Vet/Disability. Level, Title and/or Salary may be adjusted based on the applicant's experience or skills. Official description on file with Talent.