Director Data Protection And Privacy Compliance

Director Of Data Protection And Privacy Compliance

The Director of Data Protection and Privacy Compliance oversees activities related to development, implementation and maintenance of policies, processes and procedures in accordance with applicable federal and state privacy laws.

Education & Experience:

• Bachelors degree in Information Systems/Systems Security or relevant field required or eight years directly related experience. Masters degree or JD preferred.
• Minimum six years of relevant experience with minimum three years leading or influencing people
• Minimum five years experience working directly with privacy compliance and data protection matters required
• CIPP/US or CIPM certification preferred

Essential Skills:

• Extensive knowledge and experience with financial services regulation and privacy compliance for financial services industries and state and federal information privacy laws GLBA, CCPA/CPRA, GDPR etc.
• Experience with privacy principles and relative technologies (sensitive data handling, retention, user data protection, privacy by design, Data Loss Prevention, encryption, anonymization etc.)
• Extensive familiarity with financial services regulation and privacy compliance for financial services industries
• Ability to understand and interpret relevant privacy regulations, general business operations in the financial services industry, issues and dynamics beyond the scope of basic privacy compliance and data protection issues
• Ability to develop strong collaborative working relationships and communicate effectively and concisely with members of other departments on complex issues
• Integrity, fortitude, oral and written communication skills and interpersonal skills
• Ability to manage multiple projects with a strong sense of priority, urgency and commitment to deadlines

Job Responsibilities:

• Develop, implement and maintain a comprehensive, enterprise-wide data protection and privacy compliance program in compliance with federal and state laws
• Lead privacy impact assessments and risk assessment activities across the enterprise to determine the sensitivity of new and existing data. Determine how to classify, protect and monitor both structured and unstructured data to prevent unauthorized access, loss or compromise.