Compliance manager

OverviewReports to : Director, Consumer ComplianceFunctions Supervised : Information compliance including privacy compliance and records management.Primary Functions : As part of the credit union's second line of defense, this role oversees and ensures the establishment, implementation, and maintenance of comprehensive privacy compliance and records management programs within the credit union to ensure compliance with regulatory requirements and the establishment of effective business processes to protect sensitive data and safeguard the confidentiality, integrity, and availability of information.This role collaborates with key business partners, drives a strong culture of compliance, demonstrates integrity, and exercises professional judgement in safeguarding the interests of the credit union and its members.Responsibilities include the development and implementation of the related enterprise-wide compliance frameworks, including policies, procedures, controls, and periodic monitoring.Duties and Responsibilities :• Serve as the Privacy Officer and Records Manager for the credit union.• Develop, implement, and maintain a comprehensive privacy program, including all related governance documents and procedures, to ensure compliance with applicable privacy laws and regulations, including privacy rights requests and breach response requirements.• Collaborate with cross-functional teams to implement and enforce enterprise-wide information compliance practices to protect member data from unauthorized access, disclosure, alteration, and destruction.• Conduct periodic monitoring and assessments to evaluate the effectiveness of privacy, information security, and records management controls, and report results and related recommendations to management and impacted stakeholders.• Oversee the development, implementation, and maintenance of enterprise-wide records management policies and procedures to ensure compliance with legal and regulatory requirements.• Serve as a technical expert to provide guidance, training, and credible challenge to first-line business partners regarding privacy compliance, records management, and related best practices.• Stay updated on emerging information governance, privacy compliance, and records management trends, regulations, and industry standards to proactively address potential risks and identify solutions.• Serve as the primary point of contact for privacy-related inquiries and incidents (e.g., privacy rights requests and breach responses), ensuring timely and appropriate response and resolution.• Collaborate with cross-functional teams to develop and implement incident response plans, manage and investigate security incidents, and report breaches to appropriate regulatory bodies and stakeholders.• Liaise with external stakeholders, such as regulatory agencies and auditors, to facilitate compliance assessments and audits.• Monitor and report on the organization's privacy and records management compliance status to senior management, including preparation of reports and conducting research for management committees.• Perform other duties as assigned to support team and organizational efforts.QualificationsEducation : Bachelor's degree in a related field (e.g., Information Governance, Privacy, Compliance) expected. Advanced degrees in business, law, and / or applicable professional certifications in privacy (e.g., CIPP, CIPT, CIPM), compliance (e.g., CRCM), or records management (e.g., CRM) are preferred.Creditable Experience in Lieu of Education : Not ApplicableExperience / Skills : A minimum of eight years of applicable experience in the financial services industry, including direct experience with audit or regulatory compliance at an organization of similar size and complexity as Global Federal Credit Union.Strong knowledge of privacy laws and regulations applicable to the financial services industry (e.g., GDPR, CCPA, GLBA, Regulation P, TCPA, State).Demonstrated ability to apply knowledge of regulatory compliance to operational business processes to provide insight and guidance to business partners.In-depth understanding of information governance frameworks and best practices. Familiarity with records management principles and regulatory requirements.Proven experience in developing and implementing privacy programs, information governance programs, and records management systems.Strong technical writing skills related to the development of enterprise-wide policies, programs, and procedures. Excellent analytical and problem-solving skills, with the ability to assess risk and develop effective mitigation strategies.Strong communication and interpersonal skills, with the ability to collaborate with and influence stakeholders at all levels of the organization.Attention to detail and the ability to maintain confidentiality and handle sensitive information.Tenure : Not ApplicableCompensationSalary Pay Range :Information Compliance Manager (Category 06) : $91,210 - $155,919 annuallyStarting base salary will be determined based on candidate experience, qualifications, education, and local or state wage requirements, if applicable and will fall within the range provided above.In accordance with our Salary Administration policy, new hire base salaries generally fall within the minimum to midpoint of the listed range.Benefits• Short-term and long-term incentives• Comprehensive medical, dental and vision insurance plan that has HSA and FSA options• 401(k) plan with a 5% match• Employee Assistance Program (EAP)• Life and disability coverage• Voluntary cash benefits for accident, hospitalization and critical illness• Tuition Reimbursement• Generous leave programs to include Paid Time Off accrual, Paid Sick Leave, Paid Holidays• Click here to view Global's comprehensive Benefits Programs.Equal Opportunity EmployerLast updated : 2024-08-17