Overview
On Site
Full Time
Skills
Risk Management Framework
Cyber Security
Data Governance
Management
Incident Management
Reporting
Use Cases
Leadership
Artificial Intelligence
Collaboration
Partnership
Talent Management
Training
Risk Management
Regulatory Compliance
Gramm-Leach-Bliley Act
HIPAA
Law
Privacy
Risk Assessment
Job Details
Privacy Operations Lead
Reporting to the Chief Privacy Officer, the Privacy Operations Lead within the Second Line of Defense (SLOD) is responsible for operationalizing Comerica's Privacy Program in alignment with corporate objectives, the Enterprise Risk Management Framework, industry best practices, and regulatory requirements. This role interacts closely with the Technology, Cybersecurity, and Data Governance teams on privacy related practices. This individual is required to closely interact with key stakeholders in all lines of business across Comerica.
Position Responsibilities:
Privacy Program Operations
Privacy Governance and Risk Management
Additional Duties
Reporting to the Chief Privacy Officer, the Privacy Operations Lead within the Second Line of Defense (SLOD) is responsible for operationalizing Comerica's Privacy Program in alignment with corporate objectives, the Enterprise Risk Management Framework, industry best practices, and regulatory requirements. This role interacts closely with the Technology, Cybersecurity, and Data Governance teams on privacy related practices. This individual is required to closely interact with key stakeholders in all lines of business across Comerica.
Position Responsibilities:
Privacy Program Operations
- Assist the Chief Privacy Officer in managing the day-to-day operations of Comerica's privacy program.
- Implement privacy processes, controls, and procedures (such as access requests, rights requests, notices, incident response, etc.) across lines of business.
- Monitor and track privacy initiatives and provide relevant metrics and reporting.
- Enhance the individual rights request process, privacy impact assessments and explore opportunities to streamline privacy notice delivery.
- Partner with relevant teams to implement privacy tooling/technology, as applicable.
- Review AI (Artificial Intelligence) use cases for privacy risks and escalate to leadership and the AI Governance Committee as needed.
- In partnership with the Talent Development team, regularly develop and/or update privacy training and awareness materials for the business as needed.
Privacy Governance and Risk Management
- Partner with Compliance Advisory Leads to assist the business with assessing privacy risk tied to initiatives that involve personal information.
- Respond to inquiries from all lines of business related to personal information processing (e.g., GLBA, HIPAA, and state privacy law related questions).
- Advise the business on privacy risks and appropriate controls during organization wide risk assessment processes (e.g., RCSA, CRA).
Additional Duties
- Accept special projects in support of the team and community involvement.
- Other duties as assigned.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.