Compliance Privacy Director

Description The Compliance Privacy Director will lead the Privacy Office, driving the strategy for compliance with existing and new laws and regulations. Leading a team of privacy professionals and developing cross-functional business relationships, the Privacy Director will foster an open and honest risk management and compliance culture within Citizens. This includes setting strategy for compliance, providing oversight of the Privacy Program, providing guidance to all Citizens Business Lines/Divisions, and supporting the response efforts related to privacy incidents. The Privacy Director will lead various operational functions of the Privacy Program by identifying, evaluating, aggregating, and managing privacy-related risks, developing privacy-related standards, policies, procedures, and providing privacy guidance on all privacy-related concerns across the bank. Job Duties: Lead the cross-functional, bank-wide strategy for compliance with applicable existing and emerging Federal and State regulations and laws. Influence the organizational culture related to managing privacy, identity theft, and data protection risks. Collaborate with Business Lines/Divisions to assess privacy-related controls to ensure compliance with applicable laws, rules, and regulations. Partner with the Office of Fair & Responsible Banking and Corporate Security to assess potential areas of harm. Lead privacy incident investigation, analysis, and response activities for all privacy issues reported to the Privacy Office. Perform independent privacy risk assessments of regulations and laws (e.g., GLBA, GDPR, CCPA, TCPA, and other frameworks and guidance) to evaluate risks and propose mitigation controls/strategies. Analyze new business initiatives and products to identify potential privacy risks, ensuring Privacy by Design approaches are implemented. Evaluate vendor contracts and services for inclusion of appropriate privacy and data protection provisions. Develop, monitor, and analyze key risk metrics to identify emerging and potential privacy risks, trends, and issues, and escalate appropriately. Support the Chief Privacy Officer in the development, maintenance, and enhancement of the Privacy Program, as well as regulatory notifications and Board of Director communications. Partner with Business Lines/Divisions to ensure timely identification, mitigation, resolution, and escalation of existing and emerging privacy risks and issues. Required Skills/Experience : 8+ years of risk management and compliance experience in the financial services industry. 3+ years of privacy experience. Strong working knowledge of privacy-related risks associated with a banking institution, as well as experience working in and/or building effective privacy programs. Working knowledge of Artificial Intelligence and associated privacy risks. Incident response experience preferred, including experience leading investigations, analysis, and other notification/response activities. Organizational experience managing large and complex projects and the ability to interact with senior management within a matrixed environment. Deep understanding of banking products and operations; regulatory requirements; and key processes, controls, and exposure areas. Proven leadership and management skills in a professional environment. Education/Certifications : Bachelor’s degree or relevant work experience required. Advanced degree preferred (e.g., Masters/MBA/JD). Certified Information Privacy Manager (CIPM), Certified Information Privacy Professional (CIPP), or other comparable certifications preferred. Hours and Work Schedule:

Hybrid: 3 days in the office, 2 working from home Hours per Week: 40 Work Schedule: Monday-Friday The salary range for this position is $170,000.00 - $220,000.00 per year. Actual pay is based on various factors including but not limited to the work location and relevant skills and experience. We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs, and more. Note, Citizens’ paid time off policy exceeds the mandatory paid sick or paid time-away policy of very local and state jurisdiction in the United States. For an overview of our benefits, visit

https://jobs.citizensbank.com/benefits . #LI-CITIZENS2 Equal Employment Opportunity At Citizens, we are committed to fostering an inclusive culture that enables colleagues to bring their best selves to work every day. Employment decisions are based solely on experience, performance, and ability. Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression (including transgender individuals who are transitioning, have transitioned, or are perceived to be transitioning to the gender with which they identify), genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. Equal Employment and Opportunity Employer Citizens is a brand name of Citizens Bank, N.A. and each of its respective affiliates.

#J-18808-Ljbffr