Data Privacy Senior Analyst - AVP

The Data Privacy Senior Analyst is responsible for providing governance and oversight, risk management and controls leadership across the enterprise for all activities associated with Privacy.  This individual will have responsibility for covering privacy related capabilities and requirements including: compliance with the Citi Global Privacy Policy, identification and management of operational risks associated with Privacy and working across the enterprise to ensure that effective controls and monitoring are in place to reduce risk.  This role will ensure that the business is compliant with the Global Privacy Policy, Standards, and Procedures and the applicable laws rules, and regulatory requirements.

Responsibilities:

• Support the enterprise privacy governance framework activities for the 1LOD (First Line of Defense) Businesses and Functions
• Assess, evaluate, and validate controls through processes and tools such as the MCA and KRIs as appropriate for data privacy risk
• Monitor key privacy risk indicators
• Support the preparation and facilitation of enterprise privacy oversight forums
• Perform trend analysis on metrics and Issues to identify emerging risks
• Support the implementation of global, regional and local Data Privacy, regulatory and risk and control projects
• Support periodic reviews of data privacy processes and controls and validate changes as a result of such reviews
• Track and review deviations and risk acceptances when raised and at the time of renewal to assess the need for deviations and ascertain that the business has implemented and documented effective compensating controls
• Follow Escalation Policy and procedures to ensure effective escalation and socialization of material risk events and issues across businesses for any Data Privacy related items
• Escalate material risk events and issues appropriately
• Assist in creation of Issues/CAPs related to Data Privacy as needed. Track and escalate as necessary
• Data Privacy audit support - support the IMPaCT team on request responses

Qualifications:

• Demonstrates Data Privacy, Data Privacy Operations, Information Security or Cyber related risk management or minimum two years in an Internal Audit, Risk Management, or Control Management related role
• Working knowledge of Data Privacy Compliance laws, rules, regulations, risks, and appropriate controls.  Additionally, familiarity with privacy related technology considerations such as cookies, mobile devices, biometrics and geolocation data is desired
• Strong project management skills
• Optimizes work processes by knowing the most effective and efficient processes to get things done, with a focus on continuous improvement
• Ability to anticipate and balance the needs of multiple stakeholders, while monitoring tight deadlines or unexpected requirement changes
• Ability to communicate effectively 
• Risk-based thinking and analytical mindset
• Ability to build rapport and work closely with stakeholders
• Up-to-date understanding of key Data Privacy risk and control concepts, tools and trends
• Proficient in the use of basic Microsoft applications (Word, Excel, PowerPoint)

------------------------------------------------------

Job Family Group:

------------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

------------------------------------------------------

Most Relevant Skills

------------------------------------------------------

Other Relevant Skills

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.