Business Risk Specialist - Data Protection

UBS•Nashville, TN

13d

About The Position

The Business Risk Specialist - Data Protection supports data privacy and protection within the Divisional Information Security Office at Wealth Management Americas. The role carries out operational activities including data breach investigations and complaint reviews, responds to field inquiries about data privacy and data loss prevention, and analyzes data leakage incidents to improve Data Loss Prevention (DLP) rules. It coordinates rule changes through program governance and partners with technology teams on implementation. The specialist works with divisional and central information security offices, legal and data protection teams, cyber security operations, vendors, and the business to manage potential data breaches from start to finish and meet Reg S/P timelines. The role serves as a subject matter expert on DLP policy and operations and on Reg S/P and identity theft prevention program regulation. It also educates field staff and clients about recommended safeguards and actions in response to suspected identity theft reports.

Requirements

Some experience in Information Security at a financial services organization.
A university degree in a business- or technology-related field.
Strong leadership skills to coordinate actions across multiple stakeholders.
Understanding of the regulatory environment, risk frameworks, and industry best practices regarding data protection.
High degree of diligence, attention to detail, and ability to follow through and follow up.
Self-starter who is also a team player, with exceptional collaboration and open communication skills.
Strong verbal, written, and presentation communication skills.
Knowledge of internet access governance, data breach handling, and data classification tools and practices.
Experience in project management.
Proficiency with the MS Office suite and common reporting tools such as PowerBI.
Curiosity about using AI to improve workflows, with sound judgment in validating outputs and aligning with policies, risk standards, and ethical use.

Responsibilities

Execute run-the-bank activities, including data breach investigations and complaint reviews.
Respond to field inquiries regarding data privacy and data loss prevention.
Analyze data leakage incidents in the DLP tool to identify improvements to rule sets.
Shepherd DLP rule changes through program governance and work with technology teams on implementation.
Coordinate with stakeholders across information security, legal, data protection, cyber security operations, vendors, and the business to manage potential data breaches and comply with Reg S/P timelines.
Act as a subject matter expert on DLP system policy and operation.
Act as a subject matter expert on Reg S/P and identity theft prevention program regulation.
Educate field staff and clients about recommended steps and safeguards in response to suspected identity theft.