Senior Risk Compliance Officer - Privacy Officer

About the position

A Privacy Officer is responsible for developing, implementing, and overseeing an organization's privacy policies and procedures to ensure compliance with data privacy laws and regulations. This includes monitoring data collection, usage, and disclosure practices, investigating privacy incidents, and educating employees on data privacy best practices. The Privacy Officer acts as the primary guardian of an organization's sensitive information and individual privacy rights. The role requires transferrable skills that demonstrate the knowledge and ability to interpret and vet laws and regulations, along with a sense of urgency, adherence to deadlines, and meeting department quality standards for accuracy and completeness of work.

Responsibilities

• Creates, updates, and maintains comprehensive privacy policies and procedures aligned with relevant privacy laws (e.g., GDPR, CCPA, HIPAA).
• Performs initial and periodic privacy risk assessments and conducts related ongoing compliance monitoring activities.
• Establishes and maintains a process for receiving, documenting, tracking, investigating and following up on all issues concerning the organization's privacy policies and procedures.
• Manages and responds to individual data subject access requests, including data correction and deletion requests.
• Monitors data breaches and privacy violations, ensuring appropriate action when necessary.
• Develops and delivers privacy awareness training programs to employees at all levels.
• Establishes processes for obtaining informed consent from individuals regarding data collection and usage.
• Assesses third-party vendors' data privacy practices and ensures compliance with the organization's privacy standards.
• Collaborates with legal, IT, and business teams to address privacy concerns and integrate privacy considerations into business operations.
• Assists with quality control compliance reviews and assessments to identify key privacy risks and ensure adherence to privacy regulations.

Requirements

• Bachelor's degree and 4-6 years of Financial Institution experience required.
• Risk management and/or compliance background required (2-4 years).
• Strong communication and interpersonal skills to interact with various stakeholders.
• Excellent research, written and oral communication skills.
• Proficient knowledge of data privacy laws and regulations (e.g., GDPR, CCPA, HIPAA).
• High level of organizational skills, ability to multi-task and manage workflow.
• Excellent analytical, problem solving, and critical thinking skills.

Nice-to-haves

• Background in preparing for internal (Compliance Testing and/or Audit) and external (regulatory) examinations preferred.
• Legal or compliance background preferred.

Benefits

• Medical with wellness incentives, dental, and vision
• HSA with company match
• Maternity and parental leave
• Tuition reimbursement
• Mentor program
• 401(k) with 6% match