Sr. Privacy Analyst, Support & Governance

Privacy And Compliance Governance Manager

Join our team and build your career with momentum as we champion your growth, elevate your ideas and engage you in purpose-driven work that makes a real difference every day.

Essential Functions:

• Own and maintain assigned components of the privacy and compliance governance frameworks, including data inventories, privacy impact assessments, issue management, complaint governance, regulatory change management, and testing standards, as applicable.
• Establish, revise, and maintain standards, procedures, templates, methodologies, inventories, and related documentation for assigned governance areas.
• Provide oversight and challenge of enterprise privacy risk assessments, monitoring activities, and other governance reviews to evaluate program effectiveness, identify control weaknesses, and support risk-based oversight, Identify potential control gaps, assess adherence to governance expectations, and track remediation activities through resolution.
• Review assigned issues, findings, and compliance matters to confirm appropriate ownership, classification, documentation quality, and readiness for escalation or closure.
• Drive remediation, program enhancements, and continuous improvement initiatives.
• Monitor milestone progression, support adherence to governance timelines, and escalate recurring quality concerns, missed milestones, governance breaches, or systemic issues, as appropriate.
• Partner with Compliance, Information Security, Legal, IT, business units, and other stakeholders to support consistent application of privacy and compliance governance standards.
• Support privacy reviews, governance reporting, key risk indicator tracking, audits, and regulatory examinations.
• Perform other duties as assigned.

Requirements for Success:

Education & Experience:

• Bachelor's degree in Business, Compliance, Risk Management, Legal Studies, Information Security, or related field preferred; equivalent relevant experience may be considered.
• Seven (7+) years of compliance, banking, audit, or risk experience required
• Experience with data governance, information security, or privacy-related processes within a regulated financial services environment preferred.
• Experience performing risk assessments or governance oversight required
• Experience supporting or building compliance programs aligned with regulatory expectations (e.g., GLBA, data privacy, or information security frameworks) preferred

Knowledge, Skills and Capabilities:

• Advanced knowledge of banking, privacy, and data protection laws and regulations.
• Relevant privacy, compliance, or risk certifications preferred, such as CIPP, CIPM, CIPT, CISA, or CRCM.
• Strong analytical and problem-solving skills, with the ability to assess complex issues, identify root causes, and formulate sound recommendations.
• Ability to plan, organize, and prioritize multiple simultaneous assignments while managing to time-sensitive deadlines.
• Effective written and verbal communication skills, with the ability to present ideas in a clear, concise, and organized manner.
• Ability to work independently and exercise sound judgment within assigned governance responsibilities.
• Ability to lead discussions with stakeholders and work collaboratively across departments.
• Ability to adapt to changes in the regulatory environment and help shape evolving governance expectations and program responses.
• Professional judgment, integrity, and accountability in handling confidential or sensitive matters.
• Ability to assess governance effectiveness, identify systemic risks, and drive program enhancements.
• Proficiency in Microsoft Office applications, including Excel, Word, and PowerPoint.

Compliance with Laws & Regulations:

• Responsible for complying with all the Bank's internal control policies and procedures.
• Responsible for understanding and complying with all laws and regulations to which the Bank is subject.
• Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.

Work Environment/Physical Demands:

• Work is in an office environment, sustained posture in a seated position for prolonged periods of time; works with computer equipment for prolonged periods of time.
• Some stress may occur
• Travel is generally not required