Data Privacy Senior Lead Analyst - SVP

Citi Belfast, Northern Ireland, United Kingdom

Join to apply for the Data Privacy Senior Lead Analyst - SVP role at Citi

Citi Belfast, Northern Ireland, United Kingdom

1 day ago Be among the first 25 applicants

Join to apply for the Data Privacy Senior Lead Analyst - SVP role at Citi

The Data Privacy Sr. Lead Analyst will report to the Privacy Lead for Chief Operations Office and Technology Business Enablement. The role will entail additional Operational Execution Responsibilities:

• PIA & ROPA Management:
  Conduct and manage Privacy Impact Assessments (PIAs) and maintain Records of Processing Activities (ROPAs) for O&T.
• Privacy Notice/Consent Support:
  Help draft, renew, and update privacy notices and consents to comply with legal changes.
• Privacy Advisory:
  Advise businesses on privacy requirements, processes, and controls for initiatives, new products, and services, engaging legal/compliance as needed.
• Individual Rights Requests Coordination:
  Coordinate and execute responses to data subject requests. Support periodic reviews of privacy processes, validating changes.
• Audit Support:
  Support functions with data privacy reviews and audits, assisting in reviewing and responding to reviewer findings

• Complete the Privacy Impact Assessment (PIA) process and controls required for all initiatives, new products and services
• Assess, evaluate, and validate controls through processes and tools such as the MCA and KRIs as appropriate for data privacy risk
• Support the business in reviewing, maintaining, and enhancing Permanent Control Readiness
• Support product heads, function heads, COOs and In Business Risk teams on gap analysis and the implementation of global policy requirements and regional standards, as well as the assessment of the legal and regulatory requirements with Country Legal and Compliance as well as the development of local procedures as it relates to Data Privacy
• Support periodic reviews of the Business’s data privacy processes and control and validate changes as a result of such reviews
• Track and review deviations and risk acceptances when raised and at the time of renewal to assess the need for deviations and ascertain that the business has implemented and documented effective compensating controls
• Follow Escalation Policy and procedures to ensure effective escalation and socialization of material risk events and issues across businesses for any data privacy related items
• Escalate material risk events and issues appropriately;
  Assist business in creation of Issues/CAPs related to Data Privacy as needed (issues and CAPs owned by Product/Region business owner)
• Track issue and CAP status and progress for data privacy related items and proactively escalate as appropriate
• Support the Business and Functions on reviews and audits related to Data Privacy. Support the business on reviewing and responding to findings by reviewers
• Work with Global In-Business Regulatory head on all reviews and audits to ensure appropriate preparation, pre-review assessments and post-review remediation
• Coordinate and support the Business in the implementation of global, regional and local Data Privacy, regulatory and risk and control projects
• Ensure high quality execution for Data Privacy programs for any Citi initiated programs, in coordination with Global Risk and Control and In Business Regulatory Engagement Head
• Perform training on risk and control concepts, processes, tools, and effective issue self-identification and testing. Customize global and regional training programs to cater to product specific or local requirements and nuances

• 10+ years of relevant experience
• Demonstrat…