Sr Manager, Compliance - Privacy

Description

As the Privacy Manager, you'll lead a high-performing team dedicated to protecting member and employee information while advancing enterprise privacy initiatives. Partnering across Legal, Compliance, Risk, Technology, and other business functions, you'll drive responsible data practices, regulatory compliance, privacy risk management, and emerging technology governance. This role offers the opportunity to strengthen member trust and influence privacy strategies across the credit union.

Here's what you can expect from the job and what you need to be successful:

What You'll Do:

• Define, implement, and continuously enhance the enterprise privacy program, including policies, standards, procedures, controls, and the privacy program roadmap.
• Monitor and assess compliance with privacy laws and regulations, including CCPA, GLBA, Regulation P, state privacy requirements, and data breach notification obligations.
• Serve as the organization's privacy subject-matter expert, advising business partners on privacy requirements related to products, services, marketing initiatives, data use, and third-party relationships.
• Lead privacy risk assessments and reviews of business processes, data-sharing activities, third-party engagements, AI-enabled solutions, and emerging technologies; recommend appropriate safeguards and controls.
• Partner with Legal, Procurement, Risk Management, and business leaders to support privacy-related contract terms, vendor due diligence, third-party risk management, and regulatory change management.
• Oversee processes supporting privacy rights, privacy notices, consent management, data inventories, records of processing activities, and other privacy governance requirements.
• Direct privacy incident response activities, including investigation support, risk assessment, notification analysis, root cause review, remediation, and corrective action planning.
• Develop and report privacy metrics, key risk indicators, and program effectiveness measures to senior leadership, governance committees, regulators, and auditors.
• Support regulatory examinations, audits, compliance testing, control validation, and the remediation of privacy-related findings.
• Develop and promote privacy awareness, training, and accountability programs that foster responsible data stewardship across the organization.
• Lead, coach, and develop the privacy team, including workforce planning, performance management, recruitment, succession planning, and quality review of team deliverable.

Essential Skills:

• Required Experience: 8+ years of experience in privacy, data protection, compliance, risk management, or a related field, preferably within financial services or a regulated environment
• Minimum 2 years of experience leading a diverse team including hiring, coaching and performance management.
• Preferred experience supporting third-party risk management, AI governance, regulatory examinations, audits, and compliance testing, with the ability to effectively present privacy and risk matters to executive leadership, governance committees, auditors, examiners, and regulators.
• Familiarity with the NIST Privacy Framework, GLBA, CCPA, CPRA, and other applicable state privacy laws.
• Demonstrated experience developing privacy policies, risk assessments, controls, monitoring, issue remediation, training, and reporting.
• Demonstrated experience with privacy technology, data mapping, consumer rights, and consent management.
• Demonstrated experience leading cross-functional initiatives and communicating risks and recommendations to senior management.
• Required Education: Bachelors degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree)

Location: Hillsboro Corporate Office | Hillsboro OR 97124ORMarlborough Corporate Office | Marlborough, MA

Work Arrangement: Hybrid, with managers typically working 2 to 3 days per week in the office.

Target Compensation: $131,000 to $157,000 + annual bonus

#LI-HYBRID #INDHI

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.