Senior Privacy & AI Risk Analyst

Orion•Omaha, NE

3h•Hybrid

About The Position

As a Senior Privacy & AI Risk Analyst, you will be expected to spearhead privacy initiatives and coordinate cross-team collaboration, seeing privacy processes are followed through start to finish. You will also support Orion's AI governance efforts from a privacy standpoint — performing privacy reviews of AI use cases and helping ensure personal information is handled responsibly as the organization adopts AI. As we continue to evolve and live our Orion values, we are looking for someone to grow with us. It is anticipated that an incumbent in this role will work as a Hybrid employee, with three (3) or more days each week required on-site at one of the listed office locations. Candidates should be located within a commutable distance to an office. Internal candidates currently aligned to an Orion office location may be given preference; however, internal candidates with varying work arrangements may be considered based on experience and business needs. Work location is subject to change based on business needs.

Requirements

Prioritizes tasks based on importance to drive the success of the business and mitigate the organization’s risks
Has knowledge of the investment advisor industry, operations, and regulatory landscape
Has knowledge of federal and state privacy laws, rules, and regulations applicable to investment advisory and fintech business lines
Has a history of developing new policies and procedures based on changes to regulations or business operations
Learns and adapts to new systems and processes with limited direct training
Ability to multi-task while maintaining careful attention to detail
Ability to work effectively both individually and within a team environment
Ability to work with a sense of urgency to meet deadlines and address competing priorities
Proficient skills with Microsoft Office software including Word, Excel, PowerPoint, and Outlook
Effective written, listening, and verbal communication skills
Effective problem solving and organizational skills
Owns and manages relationships with stakeholders directly and work effectively with people at all levels in an organization
Has knowledge of privacy requirements applicable to AI, including automated decision-making and profiling rules under laws such as CCPA/CPRA and the Colorado AI Act
Understands core AI and machine-learning concepts and the associated data-privacy risks, such as the use of personal information in training and inference, profiling, and transparency
Has a minimum of a Bachelor's degree
Has a minimum of 5+ years of experience in financial compliance, risk, privacy or anti-money laundering program

Nice To Haves

Preferably has a privacy or AI governance certification (e.g., CIPP/US, CIPM, or AIGP)
Has experience preforming privacy reviews of AI use cases, or supporting AI governance from a privacy perspective is a plus

Responsibilities

Oversee and direct privacy planning and procedure development across Orion Advisor Solutions, including the management of privacy policies in coordinate with Legal and InfoSec
Identify potential areas of privacy vulnerability and risk, develop correction action plans for resolution of problematic issues, provide guidance of risk mitigation, and provide reporting to the Data Protection Officer
Manage responses to Potential Privacy Incident, in consultation with the Risk Officer, Orion’s Legal Department, Information Security Team, and relevant business lines
Implement the Privacy Incident Response Plan, as needed
Manage the Data Subject Rights Request (DSSR) process, including reviewing, validating, and responding to requests and maintaining a repository of requests and responses.
Monitor legal and regulatory activity regarding applicable local, state, and federal privacy laws, rules, and regulations, and coordinate with the legal, information, and business units to implement these requirements
In coordination with Information Security Team, assist in Vendor Risk Assessments relating to Privacy risks
Assist with Data Privacy Impact Assessments for new and existing business lines, products, and services
Participate in Orion committee meetings to provide privacy-related input when necessary
Support Orion's AI governance program from a privacy perspective, helping implement privacy policies, standards, and controls for the use of AI in coordination with the Privacy Program Manager, Legal, and Information Security
Perform privacy reviews and impact assessments for AI and machine-learning use cases that involve personal information, evaluating data minimization, purpose limitation, transparency, and automated decision-making and profiling risks
Help maintain an inventory of AI and automated decision-making systems that process personal information, and complete intake and initial privacy review for new and existing AI use cases
Track emerging AI-privacy requirements (e.g., automated decision-making and profiling rules under CCPA/CPRA and the Colorado AI Act) and escalate potential impacts to the Privacy Program Manager and Legal