Cybersecurity - Tech Risk Lead

Overview

The Data Risks team in the Consumer and Community Banking (CCB) Privacy Office is part of a global network of data risk professionals who identify, assess and develop programs and processes to manage risks associated with the processing of data. The team partners with Technology, Risk, Compliance, Legal, Controls and other stakeholders to identify, assess and mitigate data risks with a focus on Privacy, Data Protection, Classification and Localization.

As a Data Management Lead, you will leverage your analytical skills to assess the obligations and requirements for managing data risks, considering the complex and vast business operations, and design, manage, and socialize processes for strategic and scalable management of these risks.

• Use thematic analysis to identify process and control gaps, partnering with key stakeholders to drive stronger risk management.
• Conduct Privacy Risk Assessments for AI, applications, products and services, third‑party engagements and business initiatives involving the collection, use, retention and disposal of personal information.
• Collaborate with Legal, Cybersecurity and other partners to develop and enhance guidance on privacy risk mitigation based on laws, firm policies and industry standards.
• Oversee the implementation and governance of Data Risk Management policies and standards.
• Develop and implement sustainable processes to monitor and report on data risk metrics and key indicators.
• Design and deliver metrics, reports and presentations to communicate status, risk posture and effectiveness of controls to senior management and stakeholders.
• Maintain strong relationships with key stakeholders and serve as a point of escalation for issue resolution.
• Collaborate with Controls Management and business partners to ensure a robust control environment.
• Stay current on data localization and residency laws and regulations, and ensure compliance across all relevant jurisdictions.
• Identify opportunities for efficiency and automation, streamlining processes.
• Advise business, tech and data teams on classification based on laws, regulations and internal policies and standards.
• Develop and present executive‑level materials articulating data risks, key decisions and impacts.
• Develop and maintain training and guidance materials on data risks.
• Support Privacy Office and program initiatives.

• College degree preferred; advanced education in Data Protection, Privacy or a related field is a plus.
• Minimum of 5 years' experience managing complex, multi‑year programs with diverse, matrixed teams.
• Experience working with privacy laws such as GDPR, GLBA, CCPA.
• Experience in Data Risk Management, including familiarity with legal and regulatory requirements throughout the data lifecycle.
• Proven experience with documenting process flows and governance procedures.
• Experience with complex operational, data and technical concepts.
• Excellent written and verbal communication skills; able to tailor messages for different audiences.
• Strong organizational and prioritization skills, demonstrating flexibility in a rapidly changing environment.
• Proven ability to build partnerships and work collaboratively across teams.
• Strategic thinking and planning skills and abilities to drive innovation.

• Experience in a regulated financial institution.
• IAPP Certification (CIPP/US, CIPT), CISA or similar Certification.
• Working knowledge of AI laws, PCI‑DSS.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law.

We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.