Chief Privacy Officer

Chief Privacy Officer

The Chief Privacy Officer leader is a key senior leadership position reporting to the Chief Compliance Officer. This position is responsible for the strategic development, execution, and overall management of Comerica’s Privacy Program in alignment with corporate objectives, the Enterprise Risk Management Framework, industry best practices, and regulatory requirements.

This position will be an extension of the Chief Compliance Officer and will involve working with leaders and business lines to ensure strategies and solutions are crafted and executed effectively, communications are clear, and issues are timely addressed.

Position Responsibilities

Privacy Program Development and Implementation
Develop, implement, and maintain Comerica’s privacy policies and procedures.
Ensure Comerica complies with applicable privacy regulations, and other applicable laws and standards.
Collaboration with internal departments (e.g., Technology, Legal, Human Resources) to ensure privacy is embedded in business processes and initiatives.
Develop privacy training and communication strategy.
Partner with other leaders and teams within the Risk Division to ensure integration of privacy risks into the overall Enterprise Risk Management Framework (e.g., Risk and Control Self-Assessments. Compliance Risk Assessment).
Identify and assess potential risks to customer data and organizational privacy practices; implement corrective actions to mitigate identified risks.
Monitor and assess the impact of new laws, regulatory guidelines, and enforcement actions on Comerica’s strategic objectives and operations.
Managing Privacy Risks and Incidents
Identify potential privacy risks and develop strategies to mitigate them.
Lead the organization’s response to privacy incidents.
Investigate privacy incidents and work with internal teams to resolve them.
Communicate with regulatory authorities, clients, and affected individuals, if necessary.
Reporting
Prepare Senior Leadership and Board reporting specific to privacy program status, including potential risks or issues.

Position Qualifications
Bachelor’s degree from an accredited university Preferred in Business, Finance, IT or related field from an accredited university; OR in lieu of a bachelor’s degree, a HS diploma or GED and 10 years of privacy or data protection program management and other related experience in the financial services industry.
10 or more years experience in banking privacy, regulatory compliance, risk management, and/or related legal experience in the financial services industry.
8 years experience in understating privacy laws and regulations and applying them across an enterprise.
5 years experience managing privacy initiatives enterprise-wide
Licenses & Certifications
Preferred: Certified Information Privacy Professional (CIPP) certification or other applicable / relevant certifications or licenses

Work Best Category:
Category C – Days in the office will either be designated days or will vary week to week from 2-5 days

Hours:
8:00am – 5:00pm Monday – Friday

Salary:
To Be Determined Based on Individual Experience

Source ⇲