Summary

The Director of Data Protection and Privacy Compliance oversees activities related to development, implementation and maintenance of policies, processes and procedures and in accordance with applicable federal and state privacy laws.

Develop, implement and maintain a comprehensive, enterprise-wide data protection and privacy compliance program in compliance with federal and state laws

Lead privacy impact assessments and risk assessment activities across the enterprise to determine the sensitivity of new and existing data. Determine how to classify, protect and monitor both structured and unstructured data to prevent unauthorized access, loss or compromise.

Coordinate triage, investigation and response activities to privacy incidents

Ensure data governance, records retention, security protocols and privacy policies, standards, and procedures are up-to-date

Oversee the development of training, education and communication materials for data privacy and protection

Partner with business stakeholders and data owners to identify, define, implement and maintain best-in-class protection for sensitive and business-critical data in accordance with legal, regulatory, contractual and industry standards

Collaborate internally to ensure cross functional alignment while establishing governance for the program

Perform all duties inherent in a managerial role

Education & Experience

Bachelor’s degree in Information Systems/Systems Security or relevant field required or eight years directly related experience. Master’s degree or JD preferred.

Minimum six years of relevant experience with minimum three years leading or influencing people

Minimum five years’ experience working directly with privacy compliance and data protection matters required

CIPP/US or CIPM certification preferred

Essential Skills

Extensive knowledge and experience with financial services regulation and privacy compliance for financial services industries and state and federal information privacy laws – GLBA, CCPA/CPRA, GDPR etc.

Experience with privacy principles and relative technologies (sensitive data handling, retention, user data protection, privacy by design, Data Loss Prevention, encryption, anonymization etc.)

Extensive familiarity with financial services regulation and privacy compliance for financial services industries

Ability to understand and interpret relevant privacy regulations, general business operations in the financial services industry, issues and dynamics beyond the scope of basic privacy compliance and data protection issues

Ability to develop strong collaborative working relationships and communicate effectively and concisely with members of other departments on complex issues

Integrity, fortitude, oral and written communication skills and interpersonal skills

Ability to manage multiple projects with a strong sense of priority, urgency and commitment to deadlines

Talentsearchpro

New Jobs

Director Data Protection & Privacy Compliance - CIPP/US or CIPM certification