Director of Data Protection and Privacy Compliance

Director of Data Protection and Privacy Compliance

Hauppauge, New York 11760

Must be a US Citizen or Green Card holder.

The Director of Data Protection and Privacy Compliance oversees activities related to development, implementation and maintenance of policies, processes and procedures and in accordance with applicable federal and state privacy laws.

Education & Experience:

Bachelor s degree in Information Systems/Systems Security or relevant field required or eight years directly related experience. Master s degree or JD preferred.

Minimum six years of relevant experience with minimum three years leading or influencing people

Minimum five years experience working directly with privacy compliance and data protection matters required

CIPP/US or CIPM certification preferred

Essential Skills:

Extensive knowledge and experience with financial services regulation and privacy compliance for financial services industries and state and federal information privacy laws GLBA, CCPA/CPRA, GDPR etc.

Experience with privacy principles and relative technologies (sensitive data handling, retention, user data protection, privacy by design, Data Loss Prevention, encryption, anonymization etc.)

Extensive familiarity with financial services regulation and privacy compliance for financial services industries

Ability to understand and interpret relevant privacy regulations, general business operations in the financial services industry, issues and dynamics beyond the scope of basic privacy compliance and data protection issues

Ability to develop strong collaborative working relationships and communicate effectively and concisely with members of other departments on complex issues

Integrity, fortitude, oral and written communication skills and interpersonal skills

Ability to manage multiple projects with a strong sense of priority, urgency and commitment to deadlines

Job Responsibilities:

Develop, implement and maintain a comprehensive, enterprise-wide data protection and privacy compliance program in compliance with federal and state laws

Lead privacy impact assessments and risk assessment activities across the enterprise to determine the sensitivity of new and existing data. Determine how to classify, protect and monitor both structured and unstructured data to prevent unauthorized access, loss or compromise.

Coordinate triage, investigation and response activities to privacy incidents

Ensure data governance, records retention, security protocols and privacy policies, standards, and procedures are up-to-date

Oversee the development of training, education and communication materials for data privacy and protection

Partner with business stakeholders and data owners to identify, define, implement and maintain best-in-class protection for sensitive and business-critical data in accordance with legal, regulatory, contractual and industry standards

Collaborate internally to ensure cross functional alignment while establishing governance for the program

Perform all duties inherent in a managerial role

We provide a competitive compensation and benefits package that includes, but is not limited to:

Paid time off for vacation, personal days, and holidays

Fully-funded pension plan

401k company contribution

Teachers pay 100% of Vision & Dental Care

Tuition reimbursement is offered to full-time employees

Requirements

1. Do you have a Bachelor s degree in Information Systems/Systems Security or relevant field required or eight years directly related experience. Master s degree or JD preferred.

2. Do you have a minimum six years of relevant experience with minimum three years leading or influencing people

3. Do you have minimum five years experience working directly with privacy compliance and data protection matters required

4. Do you have CIPP/US or CIPM certification preferred

5. Do you have extensive knowledge and experience with financial services regulation and privacy compliance for financial services industries and state and federal information privacy laws GLBA, CCPA/CPRA, GDPR etc.

6. Do you have experience with privacy principles and relative technologies (sensitive data handling, retention, user data protection, privacy by design, Data Loss Prevention, encryption, anonymization etc.)

7. Do you have extensive familiarity with financial services regulation and privacy compliance for financial services industries

8. Must be a US Citizen or Green Card holder.

Benefits