Manager-Control Management

Credit & Fraud Risk is looking for a Manager of Privacy Risk Control focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies to strengthen the organization's privacy risk management framework and control environment.

The Manager, Credit & Fraud Risk Privacy Risk Control will:

• Partnering closely with Regulatory Advisory & Practices (RAP), identify, assess, and monitor privacy risks associated with business processes, products, systems, and third-party relationships
• Design, implement, and enhance privacy risk controls to mitigate regulatory, operational, and reputational risks
• Support Risk and Control Self-Assessments (RCSAs) and privacy risk assessments
• Evaluate inherent and residual privacy risks and determine whether existing controls adequately mitigate exposure
• Assess risks associated with personal data collection, processing, sharing, retention, and deletion
• Partner with business process owners to develop risk mitigation strategies
• Evaluate control design and operating effectiveness
• Identify control gaps, process weaknesses, and opportunities for control enhancements
• Ensure controls are supported by appropriate documentation, ownership, procedures, and evidence
• Support control standardization and automation initiatives
• Translate privacy requirements into operational controls and business processes
• Develop privacy risk dashboards and management information reporting
• Monitor trends in privacy incidents, control failures, and assessment results
• Serve as a privacy risk and control subject matter resource for business stakeholders
• Promote a culture of proactive Privacy risk identification, accountability, and continuous control improvement.

Required Qualifications:

• 3+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function) Understanding of critical operational risk management lifecycle activities
• Experience with risk and control frameworks, RCSA processes, and control testing
• Knowledge of privacy regulations, including GDPR, CCPA/CPRA, and GLBA
• Experience managing risk issues, remediation plans, and audit findings
• Strong analytical, problem-solving, communication, and stakeholder management skills
• Ability to influence cross-functional teams and communicate risk matters to senior leadership

Preferred Qualifications:

• Bachelor’s degree in finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
• Experience in banking, financial services, payments, or other highly regulated industries
• Professional certifications such as CIPP/US, CIPM, CRISC, CISA, or CRMP
• Familiarity with GRC platforms such as Archer, ServiceNow GRC, or OneTrust
• Experience with enterprise risk management and three-lines-of-defense models
• Knowledge of data governance, data classification, data retention, and privacy incident management