Position Title: Associate Principal, Information Governance and Privacy
Primary Duties and Responsibilities:
Foster a culture across the organization that values information as a strategic asset by collaborating with stakeholders at all levels.
Develop and implement information governance, data protection, and privacy programs, including policy creation, procedure development, and provision of necessary job aids.
Identify, evaluate, and deploy technologies that align with program objectives and classification standards.
Perform privacy impact assessments on data incidents and collaborate with relevant stakeholders to facilitate resolution.
Strategize and execute initiatives to effectively manage information throughout its lifecycle across the organization.
Prepare for and participate in regulatory and internal audits/examinations, ensuring timely remediation of any findings.
Utilize technology and tools to track projects, manage deliverables, and generate reports supporting program objectives.
Assist in compliance assessments for information governance, data protection, and privacy.
Manage the organization's Records and Information Management (RIM) program, ensuring proper retention and disposal of information across all media and formats.
Ensure adherence to retention, disposition, protection, and classification standards in new applications, platforms, and systems.
Collaborate with internal and external stakeholders to implement information governance, data protection, and privacy policies and requirements.
Develop and deliver training and awareness programs on information governance, data protection, and privacy.
Monitor privacy and regulatory trends, implementing necessary changes to the program.
Qualifications:
Strong interest and experience in information governance, data protection, and privacy policy.
Proficiency in enterprise systems, networks, databases, and technical domains.
Excellent attention to detail, customer orientation, communication, and presentation skills.
Extensive experience in building capabilities for auto data classification, data security, and data protection.
Knowledge and experience in classification standard definitions and settings.
Familiarity with privacy requirements and managing personal information protection.
Strong strategic thinking, problem-solving, and analytic skills.
Ability to utilize metrics for performance improvement.
Adaptability to changing environments and multitasking across various areas.
Experience in policy and procedure development, project management, and managing multiple priorities in a deadline-driven environment.
Familiarity with highly regulated environments and audit/compliance requirements.
Understanding of technology selection and implementation.
Ability to work independently and collaboratively with internal stakeholders of varying seniority levels.
Proficiency in gathering, analyzing, and presenting data analysis and reports.
Excellent organizational, written, and oral communication skills.
Technical Skills:
Proficiency in Microsoft Office 365 (Word, Excel, PowerPoint).
Competence in project and program management.
Experience with business intelligence tools.
SQL, Python, or another scripting language.
Education and/or Experience:
Bachelor's degree or higher in information management, information systems, law, computer science, or related field, or equivalent experience.
5 or more years of relevant work experience.
Previous experience in information or data governance control activities, preferably in the financial services industry.
Experience in the financial services industry.
Certificates or Licenses:
Certifications in Information, Data, Privacy Records, or Security such as CIPP, CIPM, CRM, CIPT, CISSP, IGP, CISM, and CISA.