• Provide significant privacy guidance and oversight.• Develop, implement and manage the Privacy-by-Design program including drafting and review of policies, workforce training, procedures, monitoring, controls, and risk mitigation planning.• Manage and drive privacy projects, including: risk assessments, audit readiness, systems and process review and documentation, and data breach response.• Collaborate with business units to vet customer-facing engagements, including the new products, services and features.• Create and manage online and live privacy awareness training.• Assist with negotiating and drafting of business associate agreements and vendor contracts.

• Created and implemented the risk assessment process for various compliance programs. Continued to create enhancements in process and documentation of risk assessments as the programs evolved.• Proficient at interpreting laws, rulings and regulations including but not limited to: FDCPA, TILA/Reg Z, UDAAP, GLBA, RFPA, FCRA/FACTA, HIPAA/HITECH, TCPA, CANSPAM, TSR, COPPA, ECPA/SCA, CalOPPA, PIPEDA, CASL, AML/BSA and applicable state/provincial data privacy and security laws.• Created applicable policies and procedures to support the compliance programs.• Created presentations and training documents for appropriate personnel.• Created First and Second Line of defense systematic and manual monitoring/testing to ensure compliance.• Supported the business with all compliance issues.• Supported the complaint management process.• Created comprehensive reporting that outlined the risk profile of a key client and the compliance program that was implemented to mitigate that risk.• Mentored direct reports in order to maintain an engaged and efficient team.• Successfully managed onsite regulatory exams. • Implemented an efficiency in the delivery of annual privacy statements that saved the company no less than 3.2million annually.

• Provided legal counsel on privacy and anti-money laundering laws including but not limited to: GLBA, RFPA, FCRA/FACTA, HIPAA/HITECH, TCPA, CANSPAM, TSR, COPPA, CalOPPA, ECPA/SCA, applicable state data privacy and data security laws, OFAC, and BSA.• Worked closely with clients to understand their business needs as well as the potential risks, both probability and impact. • Collaboratively developed business solutions with clients that satisfied their needs as well as ensured risk mitigation and compliance with laws and regulations.• Worked with Information Risk Management, Internal Investigations to provide legal analysis and guidance regarding security breach laws.• Negotiated contracts and provided legal counsel and project management services for the Procurement Department as well as practice groups across the Office of Chief Legal and Governance Officer.