Director, Privacy Operations

The Director of Privacy Operations is a key member of Enterprise Data Privacy Office’s (EDPO) leadership team and is responsible for the development, implementation and maintenance of the organization's privacy governance frameworks, policies, procedures, and controls. This includes directing the organization's Data Privacy initiatives, privacy assessments, data loss reporting, departmental privacy engagement, and issue identification and resolution.

Essential Job Functions:

Serves as the escalation contact for privacy-related inquiries, requests, and audits from internal stakeholders and communicates complex privacy topics clearly and confidently to stakeholders at all levels.

Leads the privacy assessment process, working across departments to identify, mitigate, and remediate privacy risks.

Leads and manages privacy incident response operations, including investigations, incident management, and remediation of data loss events.

Manages the department's internal and external relationships relating to privacy technology solutions used to document and record privacy activities .Leads the collaboration with stakeholders across the enterprise to ensure data management policies and technical controls supporting privacy objectives are properly tuned, serving as a strategic advisor to FINRA’s technology and data governance initiatives, translating complex privacy objectives into operational frameworks that enable innovation.

Directs the establishment of and reporting on metrics to the Board and FINRA executive management team covering the performance of the privacy program.

Responsible for identifying staffing, technology, and training investments to support enterprise privacy objectives, in alignment with the Privacy Operations budget and resource allocation.

Demonstrates FINRA’s values.

Collaborates, both in-person and virtually, in furtherance of FINRA’s mission of investor protection and market integrity.

Education/Experience Requirements:

Bachelor’s Degree with a minimum ten (10) years of experience.

Minimum five (5) years of experience working directly in data privacy roles, preferably in a regulated industry, required.

Certified Information Privacy Professional (CIPP/US) or Certified Information Privacy Manager (CIPM) preferred.

Experience supervising and implementing large-scale processes or projects

Demonstrated ability to lead, mentor, and develop staff.

Demonstrated experience in conducting privacy compliance activities such as assessments, audits, and investigations to identify and mitigate risks.

Experience managing and remediating privacy-related loss reports and incidents.

Proficiency in creating and maintaining comprehensive risk registers a plus.

Excellent collaboration and communication skills, with the ability to present complex topics to diverse stakeholders.

Confident public speaker able to defend privacy-related recommendations.

Exceptional analytical and problem-solving skills to assess privacy risks and develop mitigation strategies.

Experience with privacy regulations, standards, and best practices.

Working Conditions:

Hybrid work environment, with defined in-person presence requirements.

Extended hours as needed.

Travel occasionally required.

For work that is performed in CO, FL, TX, IL, PA, MA, MD, VA, Washington, DC, NY and NJ, please refer to the chart below for the salary range for the corresponding location. FINRA complies with all state and local pay transparency laws and regulations requiring the disclosure of salary ranges for the position. In addition to location, actual compensation is based on various factors, including but not limited to, the candidate’s skill set, level of experience, education, and market  Minimum Salary $134,400, Maximum Salary $260,400IL/PA:
Minimum Salary $147,600, Maximum Salary $286,500MA/MD/VA/Washington, DC:
Minimum Salary $154,400, Maximum Salary $299,600NY/NJ:
Minimum Salary $154,400, Maximum Salary $312,600#LI-Hybrid To be considered for this position, please submit an application. Applications are accepted on an ongoing basis.

The information provided above has been designed to indicate the general nature and level of work of the position. It is not a…