Position Title: Associate Principal, Information Governance and Privacy

Primary Duties and Responsibilities:

• Foster a culture across the organization that values information as a strategic asset by collaborating with stakeholders at all levels.
• Develop and implement information governance, data protection, and privacy programs, including policy creation, procedure development, and provision of necessary job aids.
• Identify, evaluate, and deploy technologies that align with program objectives and classification standards.
• Perform privacy impact assessments on data incidents and collaborate with relevant stakeholders to facilitate resolution.
• Strategize and execute initiatives to effectively manage information throughout its lifecycle across the organization.
• Prepare for and participate in regulatory and internal audits/examinations, ensuring timely remediation of any findings.
• Utilize technology and tools to track projects, manage deliverables, and generate reports supporting program objectives.
• Assist in compliance assessments for information governance, data protection, and privacy.
• Manage the organization's Records and Information Management (RIM) program, ensuring proper retention and disposal of information across all media and formats.
• Ensure adherence to retention, disposition, protection, and classification standards in new applications, platforms, and systems.
• Collaborate with internal and external stakeholders to implement information governance, data protection, and privacy policies and requirements.
• Develop and deliver training and awareness programs on information governance, data protection, and privacy.
• Monitor privacy and regulatory trends, implementing necessary changes to the program.

Qualifications:

• Strong interest and experience in information governance, data protection, and privacy policy.
• Proficiency in enterprise systems, networks, databases, and technical domains.
• Excellent attention to detail, customer orientation, communication, and presentation skills.
• Extensive experience in building capabilities for auto data classification, data security, and data protection.
• Knowledge and experience in classification standard definitions and settings.
• Familiarity with privacy requirements and managing personal information protection.
• Strong strategic thinking, problem-solving, and analytic skills.
• Ability to utilize metrics for performance improvement.
• Adaptability to changing environments and multitasking across various areas.
• Experience in policy and procedure development, project management, and managing multiple priorities in a deadline-driven environment.
• Familiarity with highly regulated environments and audit/compliance requirements.
• Understanding of technology selection and implementation.
• Ability to work independently and collaboratively with internal stakeholders of varying seniority levels.
• Proficiency in gathering, analyzing, and presenting data analysis and reports.
• Excellent organizational, written, and oral communication skills.

Technical Skills:

• Proficiency in Microsoft Office 365 (Word, Excel, PowerPoint).
• Competence in project and program management.
• Experience with business intelligence tools.
• SQL, Python, or another scripting language.

Education and/or Experience:

• Bachelor's degree or higher in information management, information systems, law, computer science, or related field, or equivalent experience.
• 5 or more years of relevant work experience.
• Previous experience in information or data governance control activities, preferably in the financial services industry.
• Experience in the financial services industry.

Certificates or Licenses:

• Certifications in Information, Data, Privacy Records, or Security such as CIPP, CIPM, CRM, CIPT, CISSP, IGP, CISM, and CISA.