Wealth Management Privacy Risk Specialist

About the Role

The Wealth Management (WM) Chief Data Office (CDO) operates within the WM Risk organization, aiming to balance risk management with business enablement. Its mission includes preventing unauthorized access and misuse of sensitive client data, adhering to privacy laws, effectively managing information and records, and mitigating risks from inaccurate data. The Privacy Risk Team specifically ensures WM compliance with U.S. and international consumer privacy laws, reducing regulatory and reputational risk while supporting business growth.

The WM Privacy Risk Team seeks a privacy risk expert experienced in U.S. and international privacy matters to advise business stakeholders on the privacy implications of current and proposed activities. This role involves consulting on requirements and restrictions for the collection, use, storage, and sharing of sensitive client, consumer, and employee information, particularly concerning expansion into new jurisdictions and increased AI usage. The individual will collaborate cross-functionally with privacy legal and compliance teams, business area legal coverage, business process and product owners, and technology partners. A successful candidate will possess strong problem-solving skills, the ability to integrate legal guidance with business priorities, and an understanding of control implementation complexity.

Key Responsibilities

• Provide subject matter expertise on applicable privacy regulations, laws, and industry standard procedures and controls.
• Assist with gap analysis and advise on required controls for new or amended regulations and laws.
• Advise Business stakeholders on privacy-related issues in products and services.
• Guide Business stakeholders and consult with legal and compliance colleagues to ensure the Privacy Impact Assessment process for WM systems, models, and third-party services is efficient, comprehensive, and effective at identifying risks and control requirements.
• Consult on data subject access rights requests as needed.
• Produce guidance and assist with training initiatives as needed.

Requirements & Tech Stack

• In-depth knowledge of data privacy compliance laws, including but not limited to, General Data Protection Regulation (GDPR), California Consumer Privacy Act and amendments (CCPA/CPRA), Gramm-Leach-Bliley Act (GLBA), Fair Credit Reporting Act (FCRA), etc.
• Working knowledge of digital privacy technologies and practices, including cookie consent frameworks, tracking technologies (e.g., pixels, tags), preference management tools, etc.

Qualifications

• Experience advising all levels of an organization on privacy considerations and control implementation.
• Excellent written and verbal communication skills with the ability to translate complex legal concepts into practical business guidance.
• Proven track record of meeting deadlines, learning quickly, being resourceful, and shouldering additional responsibility.
• Familiarity with the financial services industry; preferably in the area of wealth management.
• Comfort challenging and escalating risks and decisions.
• Willingness to be flexible and agile when shifting business priorities or external forces impact team coverage needs.
• Ability to work collaboratively on a team, supporting and championing both individual and team success.