Brad Pollock Email & Phone Number

Chapel Hill, Nc, Us

North Carolina, United States

My team is responsible for leading organization that ensures US federal, state, and international privacy compliance in a highly regulated and complex business environment while supporting Fidelity's strategic objectives and growth. This includes regulations governing the collection, use, disclosure, and protection of client, customer, and employee's personal information (B2B & B2C). I am the Privacy Officer for Fidelity Corporate Services organization, including Human Relations, where I focus on privacy issues and questions related to employee and applicant data, as well as serving as the HIPAA Privacy Officer for the FMR Group Health Plans. Additionally, I am the Privacy Officer for Enterprise Technology and actively partner with Data Management Governance function to ensure privacy considerations are taken into account. I also drive improvement efforts including being product owner for the Fidelity.com privacy center initiative and advocating for ID theft/fraud protection as a benefit of employment. Previously, I owned the cross-Fidelity Privacy Policy and Notice Delivery Governance Program, which required active engagement with legal, risk, compliance, public policy and marking organizations to ensure Fidelity's various privacy policies and notices align with legal and regulatory reequipments.

+ Represent Enterprise Cybersecurity (ECS) program to federal and state regulators on behalf of Fidelity legal entities.+ Partner with diverse group of stakeholders to craft and deliver responses related to the ESC program to satisfy regulatory exam inquiries and ad hoc requests for information.+ Assess legislative proposals and regulator alerts/guidance and their impact to cybersecurity policies and programs to ensure ECS program aligns with mandates.+ Coordinate and deliver presentations to current and prospective institutional clients as part of their due diligence with goal of demonstrating breadth and depth of Fidelity’s ECS program.+ Responsible for building out product and program designed to ensure Fidelity’s ECS capabilities are benchmarked in context of risk cohort with goal of ensuring the ECS program is reasonably designed to protect Firm information assets.+ Responsible for proactively analyzing ESC policies, procedures, and training materials to ensure that they consistently align with legal, regulatory, and contractual requirements.+ Support legal entity compliance programs to ensure regulatory requirements are met.+ Build constructive relationships with partners in Legal, Risk and Compliance, as well as Fidelity business units and legal entities, including subject matter experts within ECS, to ensure work product delivered is of value to organization.+ Coach junior level associates on all phases of client and regulatory response function. + Co-manage day to day operations of team and given responsibility for owning Regulatory & Client response group on several occasions for multi-month periods.+ Promoted to Director role in 2019. Earned two year-end “exceeds expectations” reviews during tenure on team.

+ Owned policy change requests, including research of controls and industry standards, gathering of requirements, facilitation of working group meetings, and moving policy through Policy Review Board adoption process.+ Developed and managed an end-to-end process to streamline the cybersecurity policy ecosystem to ensure it is more consumable by end users. Project was large, complex, and resource intensive. Initiative received highly positive feedback from management, stakeholders, and SMEs upon being delivered in-line with aggressive target date. Received a Cybert award from ECS management for work on project.+ Lead consultant in migrating cyber security policies from Archer to Open Pages platform.+ Responsible for triage of newly filed and expiring exceptions to ECS policy filed by Business Units. + Responsible for being cybersecurity consultant in development of mobile computing security training.

+ Scrum Product Owner for geographically dispersed scrum team in China, which is responsible for implementing multiple, concurrent and complex projects in support of the Workplace Investing Desktop platform.+ Collaborate with management, scrum master, scrum team, business/product SME's, project managers, shared resources and vendors on completing two week sprint development cycles.+ Work with business partners and development teams to analyze, identify, and define requirements as well as develop and prioritize stories for projects that are being implemented by the scrum team.+ Responsible for grooming and prioritizing backlog of stories/requirements to ensure scrum team works on and completes highest value work in timely manner.+ Member of management team responsible for providing process oversight.+ Received Certified Scrum Product Owner (CSPO) accreditation in December 2014.+ Received Certified Scrum Master (CSM) accreditation in September 2014.

+ Responsible for all business analyst functions, from requirements gathering through rollout phases of large scale, multi-year projects, which include large and diverse groups of business and systems stakeholders.+ Responsible for business analyst and project management functions on small scale projects.+ Elicit, capture, analyze and clearly document business requirements in order to develop, test and implement complex technical solutions that drive the goals defined in the business case.+ Create detailed use cases for large and complex business processes and translates them into detailed requirements.+ Manage review of systems documentation to ensure that it fulfills business requirements.+ Drive team responsible for developing user interface and developing content.+ Manage process to ensure that user interface and content are in compliance with relevant regulations. Responsibilities include creating documentation that was utilized in review with legal/compliance groups, working with business to edit content where necessary, and reconciling amended text in content management system.+ Manage Business Acceptance Testing process, including definition of test plan/strategy, test scenarios/cases, environment configuration, resource management, defect triage, and issue resolution.+ Support install and rollout phase of projects, including triage of post-install and rollout questions/issues.+ Coach, develop and manage performance and output of junior level resources to ensure high quality of team output.+ Evaluate team and process effectiveness and make actionable recommendations as to how improve the quality and efficiency of team interactions and deliverables.+ Successfully worked on projects utilizing both Waterfall and Agile methodologies.+ Twice nominated for and winner of Associate of the Quarter.

+ Managed Systems Development Life Cycle for media planning, buying, trafficking and invoicing applications utilized by large percentage of major advertising agencies to satisfy high-volume workflow needs + Managed team responsible for development and maintenance of applications + Developed and managed team project plan to ensure schedule is maintained and on target+ Performed business analyses and drafted business and functional requirements/design specifications+ Fostered relationships with stakeholders, including senior management, business sponsors and programmers+ Coordinated and ran business requirements gathering and JAD sessions + Facilitated and conducted training and product update sessions with internal personnel+ Partnered with Quality Assurance team to develop test scenarios and conduct manual testing efforts+ Responsible for managing production support of applications, including issue definition and problem resolution+ Promoted or given expanded responsibilities three times during tenure with organization

+ Developed policies and procedures to ensure that business groups comply with records retention requirements+ Co-chaired Electronic Data Records Retention committee, which was responsible for assessing regulatory environment, conducted risk analysis and developing process flow for retention of electronic records+ Responsible for evaluating and selecting record storage vendors and managing negotiations of national contracts+ Partnered on inter-group effort to develop, draft and roll-out corporate e-mail usage policy, after analyzing regulatory, business and technological environments+ Organized an educational conference attended by over 300 members of record’s management infrastructure

+ Responsible for managing caseload and business operations of sole-proprietorship. Areas of practice included personal injury, real estate transfers, contract litigation, wills, and guardianship matters + Drafted pleadings, motions and correspondence, reviewed document discovery materials, conducted depositions, made court appearances, formulated case strategy and consulted at other law offices on case basis

+ Drafted pleadings, motions and correspondence, made court appearances, conducted client interviews, researched and drafted appellate briefs, as well as managing daily operations of law practice specializing in criminal and personal injury law

J.D., Law

B.A., English

Education record