Compliance Program Specialist Senior - Privacy Program Specialist

PNC•Pittsburgh, PA

1d•$63,750 - $127,500•Onsite

About The Position

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Compliance Program Specialist Senior within PNC's Enterprise Compliance organization, you will be based in Pittsburgh, PA, Birmingham, AL, Cleveland, OH or Chicago, IL. The Privacy Office is a second line compliance function responsible for identifying, assessing, monitoring, reporting and advising the business on strategies to mitigate compliance risks related to federal, state and international privacy laws, including Regulation P of GLBA, HIPAA, CCPA and PIPEDA.

Requirements

3 years' experience in a Privacy role(s)
Roles at this level typically require a university / college degree, with 3+ years of relevant / direct industry experience.
In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.

Nice To Haves

CIPP-US or CIPP-PM certification
3+ years' experience in a Privacy role(s) in a moderate to large financial services (Bank) organization.
Compliance Reporting
Customer Risk
Decision Making
Regulatory Requirements
Risk Assessments
Risk Control
Strategic Objectives
Accuracy and Attention to Detail
Anti-money Laundering/Sanctions Policies and Procedures
Audit And Compliance Function
Auditing
Fraud Management
Internal Controls
Problem Solving

Responsibilities

Maintenance and administration of Enterprise Privacy Policies and Procedures for PNC Bank (US) and International Operations (Canada, UK etc.).
Conducting Independent Compliance Risk Assessments and working with ETS-Compliance Testing and Vertical compliance disciplines to develop an integrated, risk-based monitoring and testing plan.
Performing compliance monitoring activities.
Execution of programmatic challenge activities (Issues, RCSAs).
Reporting to risk committees and the Board.
Reviewing content for compliance training and working with PNCU to implement the training calendar.
Assisting with compliance related regulatory examinations and inquiries.
Maintenance and administration of Privacy Notices.
Reviewing Data Protection Impact Assessments (via Change Navigator and Service Now) and advising on risk mitigation strategies.
Monitoring Privacy Mailbox.
Supporting strategic enterprise initiatives including UK Branch and AI Governance.
Other responsibilities as assigned.
Plans the execution of compliance programs to prevent illegal, unethical, or improper business practices.
Develops ability to constructively challenge conclusions/status quo.
Supports key business initiatives by analyzing data to identify compliance risks.
Assists in providing resolutions to manage and mitigate the identified risks.
If necessary, escalates identified risks to senior team members.
Identifies compliance impact on matters such as marketing materials, sales programs, product development, documentation review and other business initiatives.
Assesses activity for existing and emerging risks.
Evaluates the materiality of the risks identified.
Researches current laws, rules, and other regulatory requirements and drafts or assesses Compliance Manuals, Front Office materials, policies and procedures to ensure alignment.
Manages the compliance monitoring program and reviews activity to ensure it falls within established risk control limits.
Leads the execution of the Compliance program objectives for assigned area, products/services, and applicable regulations.
Communicates and socializes compliance program objectives to business partners.
Independently challenges analyses and formulates recommendations.
Edits compliance reports.
Analyzes the reports to identify deeper issues, escalates through proper governance channels as needed, and recommends corrective action plans.
Assists in updating or implementing new/enhanced reports in order to ensure timely and effective compliance with regulatory requirements.