Senior Risk Compliance Officer - Privacy Officer

First Horizon Corp.•Raleigh, NC

51d•Onsite

About The Position

A Privacy Officer is responsible for developing, implementing, and overseeing an organization's privacy policies and procedures to ensure compliance with data privacy laws and regulations, by monitoring data collection, usage, and disclosure practices, investigating privacy incidents, and educating employees on data privacy best practices; essentially acting as the primary guardian of an organization's sensitive information and individual privacy rights. Must have transferrable skills that demonstrate the knowledge and ability to interpret and vet laws and regulations. Exhibits a sense of urgency, adheres to deadlines (both internal and those required by law) and meets department quality standards for accuracy and completeness of work.

Requirements

Bachelor (4-year college) degree and 4-6 years of Financial Institution experience required. Risk management and/or compliance background required (2-4 years). Background in preparing for internal (Compliance Testing and/or Audit) and external (regulatory) examinations preferred.
Strong communication and interpersonal skills to interact with various stakeholders
Excellent research, written and oral communication skills. Ability to read and interpret legal documents and government regulations and work well under pressure.
Proficient knowledge of data privacy laws and regulations (e.g., GDPR, CCPA, HIPAA). Legal or compliance background preferred.
Must possess a high level of organizational skills, ability to multi-task and manage workflow, prioritize, adjust to changes, and follow-up.
Excellent analytical, problem solving, and critical thinking skills.
Ability to develop and implement effective privacy policies and procedures
Proficient Microsoft Office suite

Nice To Haves

Legal or compliance background preferred.
Background in preparing for internal (Compliance Testing and/or Audit) and external (regulatory) examinations preferred.

Responsibilities

Policy Development and Implementation: Creates, updates, and maintains comprehensive privacy policies and procedures aligned with relevant privacy laws (e.g., GDPR, CCPA, HIPAA).
Risk Assessments: Performs initial and periodic privacy risk assessments and conducts related ongoing compliance monitoring activities in coordination with compliance and operational assessment functions.
Compliance Monitoring: Establishes and maintains a process for receiving, documenting, tracking, investigating and following up on all issues concerning the organization's privacy policies and procedures in coordination and collaboration with other similar functions and, when necessary, legal counsel. Conducts regular assessments to ensure adherence with data privacy regulations and that findings are addressed timely and appropriately.
Data Subject Requests: Manages and responds to individual data subject access requests, including data correction and deletion requests.
Incident Response: Monitors data breaches and privacy violations, including ensuring appropriate action when necessary. Regularly performs reviews of internal audit reports and regulatory reports of examination to identify privacy related issues and to determine if corrective action commensurate with the complexity of the identified issue and/or weakness is being taken
Privacy Training: Develops and delivers privacy awareness training programs to employees at all levels to educate them on proper data handling practices. Initiates, facilitates and promotes activities to foster information privacy awareness within the organization and related entities.
Consent Management: Establishes processes for obtaining informed consent from individuals regarding data collection and usage.
Vendor Management: Assesses third-party vendors' data privacy practices and ensuring compliance with the organization's privacy standards.
Stakeholder Engagement: Collaborates with legal, IT, and business teams to address privacy concerns and integrate privacy considerations into business operations.
Governance: Assists with quality control compliance reviews and assessments to identify key privacy risks and ensure adherence to privacy regulations. Assists with the preparation of committee reports as necessary
Performs other related duties as required
Assists with directing, coordinating, and evaluating designated units or certain personnel in accordance with the organization's policies and applicable laws. Responsibilities may include training employees; planning, assigning, and directing work; appraising performance; providing pay change recommendations; disciplining employees; addressing complaints and resolving problems.