Data Privacy Officer

S&T Bank - Cuyahoga Falls, OH

Full-time - Mid Level

Cuyahoga Falls, OH

Credit Intermediation and Related Activities

About the position

The Privacy Office within Compliance Risk Management is responsible for managing the day-to-day activities related to data privacy compliance within the Bank. This role is crucial in driving the strategy for compliance with existing and new laws and regulations. The individual in this position will develop cross-functional business relationships and foster a strong risk management culture throughout the organization. This includes collaborating on strategies for data privacy compliance, providing guidance and expertise to all lines of business, and supporting response efforts related to privacy incidents. The Data Privacy Program will be managed by identifying, evaluating, and mitigating privacy-related risks. This involves developing privacy-related processes, policies, and procedures, as well as providing privacy guidance to various business lines. The position also entails assisting with product/service/vendor risk assessments, responding to data privacy-related consumer complaints, and conducting root cause analysis. The individual will maintain an in-depth knowledge of federal and state laws and regulations related to data privacy and consumer protection. They will be responsible for understanding S&T's Consumer Compliance Program, policies, procedures, and processes. Communication of issues related to business operations, regulatory developments, and emerging risk issues will be essential. The role requires collaboration with other operational lines, including the Information Security department, to ensure compliance with federal privacy breach notification requirements. Additionally, the position involves preparing reports and providing updates to the Compliance Committee and the Data Governance Council as requested. The individual will be expected to obtain and maintain designations such as Certified Information Privacy Professional (CIPP) or Certified Information Privacy Manager (CIPM). They will support the Chief Privacy Officer in designing and maintaining a risk-based consumer compliance data privacy program and will be responsible for suggesting continuous improvements. Ensuring that departmental procedures are maintained and assisting with corporate compliance policy review and development will also be part of the role. Collaboration with business lines to assess privacy-related controls for compliance with applicable laws and regulations is critical, as is providing credible review and challenge of the first line of defense controls. The individual will assist in developing and updating privacy-related compliance training modules, completing product/service/vendor compliance risk assessments, and responding to consumer complaints related to privacy concerns. They will work with Marketing to ensure the Bank's Privacy Notices are updated as necessary and assist with Privacy Assurance Reviews. The management of the Data Privacy Manager system, including ensuring data maps are updated and correct, reviewing consumer requests for compliance requirements, and tracking each consumer request from intake to closure, will also be part of the responsibilities. Maintaining a good working relationship with all S&T employees is essential for success in this role.

Responsibilities

• Manage the day-to-day activities of the Privacy Office within Compliance Risk Management.
• Drive the strategy for compliance with existing and new laws and regulations.
• Develop cross-functional business relationships and foster a strong risk management culture within the Bank.
• Collaborate on strategy for data privacy compliance and provide guidance to all lines of business.
• Support response efforts related to privacy incidents.
• Manage the Data Privacy Program by identifying, evaluating, and mitigating privacy-related risks.
• Develop privacy-related processes, policies, and procedures.
• Provide privacy guidance to business lines.
• Assist with performing product/service/vendor risk assessments.
• Respond to data privacy-related consumer complaints and conduct root cause analysis.
• Maintain current in-depth knowledge of federal and state laws and regulations related to data privacy consumer protection.
• Communicate issues related to business operations, regulatory developments, and emerging risk issues.
• Collaborate with operational lines to comply with federal privacy breach notification requirements.
• Prepare reports and provide updates to the Compliance Committee and Data Governance Council.
• Obtain and maintain the designation of Certified Information Privacy Professional (CIPP) or Certified Information Privacy Manager (CIPM).
• Support the Chief Privacy Officer in designing and maintaining a risk-based consumer compliance data privacy program.
• Assist with corporate compliance policy review and development.
• Collaborate with business lines to assess privacy-related controls for compliance.
• Assist in the development and updating of privacy-related compliance training modules.
• Work with Marketing to ensure the Bank's Privacy Notices are updated as necessary.
• Manage the Data Privacy Manager system and ensure data maps are updated and correct.

Requirements

• In-depth knowledge of federal and state laws and regulations related to data privacy consumer protection.
• Thorough knowledge of S&T's Consumer Compliance Program, policies, procedures, and processes.
• Ability to communicate issues related to business operations and regulatory developments effectively.
• Experience in collaborating with operational lines to ensure compliance with privacy breach notification requirements.
• Strong report preparation and presentation skills for Compliance Committee and Data Governance Council updates.
• Certification as a Certified Information Privacy Professional (CIPP) or Certified Information Privacy Manager (CIPM) is preferred.

Nice-to-haves

• Experience in risk management and compliance roles within the banking sector.
• Familiarity with data privacy technologies and tools.
• Strong analytical and problem-solving skills.
• Excellent interpersonal and communication skills.

Benefits

• Health insurance coverage
• 401k retirement savings plan
• Paid holidays
• Professional development opportunities
• Flexible scheduling options