Bennett Robinson
CIPP/US, CIPM, PMP, GRCP, IAIP

Privacy, Compliance & AI Governance

I help organizations turn privacy, compliance, and AI governance requirements into programs people can actually run. Over more than a decade I've built and operated GRC and privacy programs, standing up controls for SOC 2, ISO 27001, and PCI-DSS; running DSAR, PIA/DPIA, and ROPA processes; and advising leadership on third-party risk, regulatory change, and board-level reporting. That includes serving as Data Protection Officer. Based in the Minneapolis–St. Paul area, and glad to compare notes with peers building practical, risk-based programs.

Governance, Risk, and Compliance Leader

Highly experienced with Governance, Risk Management, and Compliance (GRC) efforts I am particularly adept at building and implementing robust governance structures to meet and exceed audit requirements. My focus is on developing practical, risk-based solutions aligned with operational needs and strategic objectives.My track record includes the deployment and maintenance of common control frameworks (SOC 2, PCI-DSS, ISO 27001/27701), establishing comprehensive risk management programs (NIST RMF, COSO, ISO guidance), conducting risk assessments across all organizational levels, and managing the full lifecycle of Third-Party Risk Management (TPRM).

• Chevron Down

Information Security & Data Privacy Expert

My track record is centered around Information Security and Data Privacy, where I have been a leader with a strong background in developing, implementing, and managing comprehensive security and privacy programs. I have served as Data Protection Officer (DPO) at multiple organizations, and have repeatedly demonstrated the ability to implement and improve data privacy programs to meet complex state (CCPA/CPRA), federal (HIPAA-BA, COPPA), and international regulations (GDPR).I am adept at managing high-volume DSAR processes, conducting security and privacy assessments (PIA), implementing physical and technical security measures, and providing expert consultancy on privacy best practices within an AWS environment using tools like Vanta and TrustCloud.

• Chevron Down

Team Builder in Any Environment

My background has allowed me to excel at collaborating with senior leadership and cross-functional teams to achieve compliance certifications, mitigate risks, and meet demanding deadlines. I have served in positions requiring collaboration across several siloed departments, reporting directly to Board members, and championing compliance efforts within an organization.

• Chevron Down