Associate Vice President, Legal – Privacy, Cybersecurity & AI Governance

Bath & Body Works is hiring an Associate Vice President, Legal for Privacy, Cybersecurity & AI Governance in Columbus, OH (onsite).

Responsibilities

• Lead and continuously improve privacy, data, and AI governance programs aligned to business priorities, legal requirements, and recognized frameworks, including NIST
• Advise executives and business leaders on privacy, cybersecurity, AI, data use, automation, and emerging legal risk
• Translate complex requirements into practical, business-focused solutions
• Develop and maintain policies, standards, procedures, and privacy and AI risk-assessment processes to identify, prioritize, and mitigate risk
• Oversee privacy, cybersecurity, data protection, and AI reviews for vendors and commercial agreements
• Maintain relevant contract terms and templates
• Direct legal support for data and cybersecurity incidents, including preparedness exercises, investigations, escalation, notification, reporting, and remediation
• Oversee compliant and efficient data-subject-rights processes and supporting automation
• Deliver enterprise and role-based education to strengthen privacy, cybersecurity, and AI accountability
• Provide subject-matter expertise for privacy-related disputes, investigations, litigation, and regulatory matters in partnership with internal and external counsel
• Partner with IT, Cybersecurity, Digital, Marketing, HR, and other functions to embed privacy and responsible AI into business processes and technology initiatives
• Present clear assessments, recommendations, and program updates to executive leaders and, as appropriate, the Board of Directors
• Lead, develop, and retain a high-performing legal team while managing priorities, external counsel, and budget responsibilities

Requirements

• 12+ years of progressive legal experience, including leadership responsibility in a global environment (public company experience preferred)
• Deep expertise in privacy law with strong working knowledge of cybersecurity, data governance, and AI law and regulation
• Proven experience building and operationalizing governance programs, policies, risk assessments, and incident-response processes
• Ability to learn and apply emerging bodies of law to evolving business models, technologies, and markets
• Strong skills in executive communication, judgment, change leadership, collaboration, and decision-making
• High integrity and discretion when handling sensitive, confidential information

Technologies

• NIST

Education

• Juris Doctor degree from an accredited law school
• Active license in good standing in at least one U.S. jurisdiction
• Bachelor’s degree

Compensation

• USD 178,000 - 270,600 per year

Core Competencies

• Drives Results
• Action Oriented
• Collaborates
• Decision Making
• Nimble Learning

Benefits

• Medical, dental, vision, and pharmacy coverage
• Onsite wellness center and pharmacy at the Columbus, OH home office
• No-cost mental health and well-being support through the Employee Assistance Program (EAP)
• 401(k) with company match
• Associate Stock Purchase Program with discount
• Paid time off
• Paid parental leave
• Access to family building benefits
• Home, auto and pet insurance
• Company-provided Care.com subscription
• Tuition reimbursement and scholarship opportunities for post-secondary education
• Complimentary products and 40% merchandise discount
• More details at bbwbenefits.com