Accountable for implementing privacy requirements into key processes and tools across the Enterprise

Operates in a dual role and demonstrates subject matter expertise in risk management practices. Partners with Compliance, Quality Assurance, and Internal Audit to analyze identified inherent risks that require attention. Responsible for designing processes and controls necessary to mitigate identified gaps while providing senior leadership with data and analysis support during committee and board meetings. Reports directly to the Chief Risk Officer. • Recipient of one performance-based promotion; supervises a team of associates in daily operations.• Directs the Risk Oversight Analyst team in conducting Risk Assessments enterprise wide; provides oversight and guidance in risk identification, testing, and analysis.• Designs Key Risk indicators to be utilized by all business units during the assessment process, including risk event triggers and proactive planned responses; results have implemented unit-specific risk monitoring plans.• Approves requested Due Diligence exceptions for Third-Party Operations department; assesses business unit’s risk tolerance in the approval of new vendors and evaluates vendor’s risk level related to insurance requirements or contract changes.• Spearheaded the redesign of the Risk Assessment process; results created formal documentation and reporting processes.

Oversees and leads the organizational privacy program related to safeguarding employee, customer, and corporate information pursuant to legal, regulatory, and accreditation requirements and standards. Sustains and promotes a strong corporate culture while maintaining policies and partnering with other business units to bring consistency and centralized access. • Acts as unofficial Privacy Officer to privately-held organization comprising two locations and 700 employees with $220M in annual revenue.• Addresses and responds to all privacy events; drafts communications to impacted customers and regulators while issuing requests to destroy information directed at unintended third parties.• Championed the redesign of the privacy program; restructured all formal documentation and reporting while providing guidance to the executive leadership team regarding privacy practices to ensure compliance.• Created, introduced, and conducted privacy awareness training for all employees at all levels; devised coursework that outlined laws and regulations that drive privacy practices as well as their importance to daily operations. Coaches on this matter in an ongoing basis.• Collaborated with Compliance Business Partners on operational practices and regulatory change. Strategized on the European Union’s General Data Protection Regulation (GDPR) in relation to increasing state and agency requirements.

Responsible for identifying and rating inherent and residual risks in business unit risk assessment. Evaluated legal, compliance, reputational, operational, financial, counterparty, and strategic risks while engaging in process design. Reported findings and strategized on action plans alongside Compliance and Operations departments.

Promoted to direct analyst team in the rebuilding of the program and the daily processing of correspondence received via multiple channels. Managed both on and offshore full-time staff members, staff augmented associates, and temporary employees. Successfully devised and implemented new control reports while revising existing materials to more accurately reflect daily inflow received as well as total production. Improved operational efficiencies through the creation and enhancement of 150 processes.

Researched and analyzed customer Notices of Error and Qualified Written Requests, as well as legal, third party, and regulator inquiries, in accordance with RESPA, TILA, UDAAP, Graham-Leach-Bliley, and other federal and state laws. Responded to inquiries on 1000+ complaints while recommending error corrections and detecting process or control gaps.