Enterprise Privacy Compliance and Operational Risk Manager

4 weeks ago


Atlanta, United States Bank of America Corporation Full time

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us

Job Description:

This job is responsible for the execution of the Global Compliance - Enterprise Policy, the Operational Risk Management - Enterprise Policy and the Compliance and Operational Risk Management (CORM) Program. Key responsibilities include identifying, escalating, and mitigating risks in a timely manner, engaging with Front Line Units and Control Functions (FLU/CF) leaders globally, coordinating with the FLU/CF Compliance and Operational Risk Officer teams, executing the CORM Program and the Policies, identifying themes and trends, and conducting analysis for new and emerging risks.

Responsibilities:

* Assesses risks, associated controls and their effectiveness, driving compliance with applicable laws, rules, and regulations and adhering to policies


* Engages in activities to provide independent compliance and operational risk oversight of Front Line Unit or Control Function (FLU/CF) performance and any related third party/vendor relationships in alignment with the Global Compliance - Enterprise Policy, the Operational Risk Management - Enterprise Policy (collectively the Policies) and the Compliance and Operational Risk Management Program and Standard Operating Procedures


* Identifies and escalates problems or issues that arise and drives actions to address the root causes that lead to compliance risk issues and/or operational risk losses, including opening new issues based on risk severity in the centralized issues tool


* Manages inventory of processes, risks, controls, and associated metrics for risk appetite and limits, reporting violations of compliance or regulatory activities


* Analyzes and interprets applicable laws, rules, and regulations to provide clear and practical advice to stakeholders, and identify and manage risks including monitoring the regulatory environment to identify regulatory changes applicable to area(s) of coverage and maintaining a comprehensive regulatory inventory, while supporting communication of regulatory changes to the FLU/CF and ensuring that policies, standards, procedures and/or processes are appropriately implemented or amended to address regulatory requirements


* Responds to regulatory inquiries, other audits, and examinations and identifies regulatory training needs supporting the development of the training curriculum


* Reviews and challenges FLU/CF process, risk, Single Process Inventory and FLU/CF Risk and Control Self-Assessment related to themes or trends, while monitoring the regulatory environment to identify regulatory changes applicable to area(s) of coverage



Skills:

* Advisory


* Regulatory Compliance


* Reporting


* Risk Management


* Written Communications


* Active Listening


* Analytical Thinking


* Interpret Relevant Laws, Rules, and Regulations


* Negotiation


* Policies, Procedures, and Guidelines Management


* Adaptability


* Business Process Analysis


* Issue Management


* Monitoring, Surveillance, and Testing



Job Description:

Enterprise Privacy is a global team of subject-matter experts responsible for Compliance & Operational Risk coverage of Data Privacy across the enterprise operating in a highly technical, fast-changing and dynamic environment. This job is responsible for the execution of the Global Compliance - Enterprise Policy, the Operational Risk Management - Enterprise Policy and the Compliance and Operational Risk Management (CORM) Program specific to Data Privacy risks. Key responsibilities include identifying, escalating, and mitigating risks in a timely manner, engaging with Front Line Units and Control Functions (FLU/CF) leaders globally, coordinating with the FLU/CF Compliance and Operational Risk Officer teams, executing the CORM Program and the Policies, identifying themes and trends, and conducting analysis for new and emerging risks.

Responsibilities:

* Assesses risks, associated controls and their effectiveness, driving compliance with applicable laws, rules, and regulations and adhering to policies
* Engages in activities to provide independent compliance and operational risk oversight of Front Line Unit or Control Function (FLU/CF) performance and any related third party/vendor relationships in alignment with the Global Compliance - Enterprise Policy, the Operational Risk Management - Enterprise Policy (collectively the Policies) and the Compliance and Operational Risk Management Program and Standard Operating Procedures
* Identifies and escalates problems or issues that arise and drives actions to address the root causes that lead to compliance risk issues and/or operational risk losses, including opening new issues based on risk severity in the centralized issues tool
* Manages inventory of processes, risks, controls, and associated metrics for risk appetite and limits, reporting violations of compliance or regulatory activities
* Analyzes and interprets applicable laws, rules, and regulations to provide clear and practical advice to stakeholders, and identify and manage risks including monitoring the regulatory environment to identify regulatory changes applicable to area(s) of coverage and maintaining a comprehensive regulatory inventory, while supporting communication of regulatory changes to the FLU/CF and ensuring that policies, standards, procedures and/or processes are appropriately implemented or amended to address regulatory requirements
* Responds to regulatory inquiries, other audits, and examinations and identifies regulatory training needs supporting the development of the training curriculum
* Reviews and challenges FLU/CF process, risk, Single Process Inventory and FLU/CF Risk and Control Self-Assessment related to themes or trends, while monitoring the regulatory environment to identify regulatory changes applicable to area(s) of coverage

Minimum Years of Business & Functional Experience: 7 years

Desired Skills: In depth knowledge of or certification in law, rule, regulation and/or Data Privacy; Association of Privacy Professional (IAPP) accredited certification programs

Shift:

1st shift (United States of America)

Hours Per Week:

40



  • Atlanta, United States Bank of America Full time

    Description : Enterprise Privacy is a global team of subject-matter experts responsible for Compliance & Operational Risk coverage of Data Privacy across the enterprise operating in a highly technical, fast-changing and dynamic environment. This job is responsible for the execution of the Global Compliance - Enterprise Policy, the Operational Risk...


  • Atlanta, United States Bank of America Full time

    Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for...


  • Atlanta, United States Graphic Packaging International, Inc. Full time

    MISSION / SUMMARY :   The position is responsible for the leadership, innovation, governance, and management necessary to identify, evaluate, mitigate, and monitor the company's operational and strategic risk. This includes tools, practices, and policies to analyze and report enterprise risks, and to manage risks according to an enterprise risk management...

  • Senior Manager

    3 days ago


    Atlanta, United States Selby Jennings Full time

    We are partnered with an elite insurance firm that is looking to hire an Enterprise Risk Management Specialist. In this role, you will collaborate closely with management, serving as a business-focused, value-added partner to support the 1st Line of Defense and 2nd Line of Defense activities aimed at maturing our enterprise risk management programs.Key...

  • Senior Manager

    2 days ago


    Atlanta, United States Selby Jennings Full time

    We are partnered with an elite insurance firm that is looking to hire an Enterprise Risk Management Specialist. In this role, you will collaborate closely with management, serving as a business-focused, value-added partner to support the 1st Line of Defense and 2nd Line of Defense activities aimed at maturing our enterprise risk management programs.Key...

  • Senior Manager

    3 days ago


    Atlanta, United States Selby Jennings Full time

    We are partnered with an elite insurance firm that is looking to hire an Enterprise Risk Management Specialist. In this role, you will collaborate closely with management, serving as a business-focused, value-added partner to support the 1st Line of Defense and 2nd Line of Defense activities aimed at maturing our enterprise risk management programs. Key...


  • Atlanta, United States Risk & Insurance Management Society Inc Full time

    A well-established & growing electric utility in Atlanta, Ga. has an immediate opening for a Director of Risk Management – reporting to the VP, Chief Legal & Compliance Officer. This newly created position provides a challenging opportunity for a risk management professional to meet a significant corporate need by enhancing the existing Enterprise Risk...

  • VP of Enterprise Risk

    2 months ago


    Atlanta, United States Selby Jennings Full time

    We are partnered with an elite insurance firm that is looking to hire an Enterprise Risk Management Specialist. In this role, you will collaborate closely with management, serving as a business-focused, value-added partner to support the 1st Line of Defense and 2nd Line of Defense activities aimed at maturing our enterprise risk management programs.Key...

  • VP of Enterprise Risk

    2 months ago


    Atlanta, United States Selby Jennings Full time

    We are partnered with an elite insurance firm that is looking to hire an Enterprise Risk Management Specialist. In this role, you will collaborate closely with management, serving as a business-focused, value-added partner to support the 1st Line of Defense and 2nd Line of Defense activities aimed at maturing our enterprise risk management programs.Key...

  • Governance Risk

    2 weeks ago


    Atlanta, United States Mission Recruit Full time

    Job Summary Maintains and contributes to the design of the Companys cybersecurity Governance, Risk, and Compliance program (GRC). The GRC Analyst II plays a key role in assessing technology-related risks and ensuring compliance with relevant regulations, policies, standards, and controls designed to protect the organizations information assets. Learned...


  • Atlanta, United States Emory Healthcare Full time

    Description The Senior Privacy Analyst reports to Emory Healthcare (EHC) Compliance and Privacy Office Leadership. The EHC Senior Privacy Analyst will perform ongoing privacy monitoring activities to ensure compliance with applicable privacy laws and policies. In addition, this position leads and assists with ongoing activities related to the development,...


  • Atlanta, United States Emory Healthcare Full time

    Description The Senior Privacy Analyst reports to Emory Healthcare (EHC) Compliance and Privacy Office Leadership. The EHC Senior Privacy Analyst will perform ongoing privacy monitoring activities to ensure compliance with applicable privacy laws and policies. In addition, this position leads and assists with ongoing activities related to the development,...

  • Governance Risk

    2 weeks ago


    Atlanta, United States PulteGroup Full time

    Job Summary: Maintains and contributes to the design of the Company's cybersecurity Governance, Risk, and Compliance program (GRC). The GRC Analyst II plays a key role in assessing technology-related risks and ensuring compliance with relevant regulations, policies, standards, and controls designed to protect the organization's information assets. Learned...

  • Governance Risk

    1 week ago


    Atlanta, United States PulteGroup Full time

    Job Summary: Maintains and contributes to the design of the Company's cybersecurity Governance, Risk, and Compliance program (GRC). The GRC Analyst II plays a key role in assessing technology-related risks and ensuring compliance with relevant regulations, policies, standards, and controls designed to protect the organization's information assets. Learned...

  • Governance Risk

    3 days ago


    Atlanta, United States PulteGroup Full time

    Job Summary: Maintains and contributes to the design of the Company's cybersecurity Governance, Risk, and Compliance program (GRC). The GRC Analyst II plays a key role in assessing technology-related risks and ensuring compliance with relevant regulations, policies, standards, and controls designed to protect the organization's information assets. Learned...


  • Atlanta, United States PRGX Global, Inc. Full time

    The Governance, Risk and Compliance Manager (Security) specializes in third-party risk assessments, ISO27001 audits, SOC2 audits, and client-conducted risk assessments. The position plays a pivotal role in maintaining and enhancing PRGX's governance, risk and compliance framework. Key Responsibilities: ISO27001 Audits: * Oversees the preparation,...


  • Atlanta, United States PRGX Global, Inc. Full time

    The Governance, Risk and Compliance Manager (Security) specializes in third-party risk assessments, ISO27001 audits, SOC2 audits, and client-conducted risk assessments. The position plays a pivotal role in maintaining and enhancing PRGX's governance, risk and compliance framework. Key Responsibilities: ISO27001 Audits: * Oversees the preparation,...


  • Atlanta, Georgia, United States WARNERMEDIA Full time

    Welcome to Warner Bros. Discovery... the stuff dreams are made of.Who We Are... When we say, "the stuff dreams are made of," we're not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD's vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life,...


  • Atlanta, Georgia, United States Warner Bros. Discovery Full time

    Every great story has a new beginning, and yours starts here.Welcome to Warner Bros. Discovery... the stuff dreams are made of.Who We Are... When we say, "the stuff dreams are made of," we're not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD's vast portfolio of iconic content and beloved...


  • Atlanta, United States Warner Bros. Discovery Full time

    Welcome to Warner Bros. Discovery... the stuff dreams are made of. Who We Are... When we say, "the stuff dreams are made of," we're not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD's vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to...