Director of Enterprise Data Protection and Privacy

U.S. Bank • Minneapolis, MN

2d • Hybrid

About The Position

At U.S. Bank, protecting customer, employee, and company information is fundamental to maintaining trust and meeting our regulatory obligations. The Director of Enterprise Data Protection & Privacy serves as a senior leader responsible for providing strategic oversight of the Enterprise Data Protection and Privacy (EDPP) Program and ensuring the organization maintains effective governance, risk management, and compliance practices related to privacy and data protection. This role partners across business lines, Legal, Compliance, Information Security, Technology, Third-Party Risk Management, Audit, and executive leadership to establish and oversee a comprehensive framework that safeguards personal information and supports compliance with applicable privacy, data protection, cybersecurity, and financial services regulations. The Director will lead enterprise-wide initiatives, oversee privacy and data protection risk management activities, support Board and executive reporting, and drive continuous enhancement of the organization's privacy compliance posture.

Requirements

• Bachelor's or advanced degree, or equivalent work experience
• Typically more than 12 years of applicable experience
• Considerable understanding of applicable laws, regulations, financial services, and regulatory trends that impact their assigned line of business
• Considerable understanding of the business line’s operations, products/services, systems, and associated risks/controls
• Thorough knowledge of Risk/Compliance/Audit competencies
• Strong leadership and management skills of processes, projects and people
• Effective skills at managing stressful situations
• Effective written and verbal communication skills
• Strong analytical, problem-solving and negotiation skills
• Proficient computer skills, especially Microsoft Office applications
• Applicable professional certifications

Responsibilities

• Oversee compliance with applicable privacy and data protection laws and regulations, including: GLBA CCPA/CPRA GDPR and international privacy requirements State privacy laws and evolving regulatory frameworks
• Monitor regulatory developments and assess organizational impacts.
• Identify, assess, escalate, and monitor enterprise privacy and data protection risks.
• Drive remediation efforts for regulatory examinations, audits, and identified control weaknesses.

Benefits

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short-term and long-term disability
• Pregnancy disability and parental leave
• 401(k) and employer-funded retirement plan
• Paid vacation (from two to five weeks depending on salary grade and tenure)
• Up to 11 paid holiday opportunities
• Adoption assistance
• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

What This Job Offers

• Job Type: Full-time
• Career Level: Director