Privacy Compliance Advisor, Manager (Processes and Governance)

Capital One's technology transformation has presented an exciting opportunity to usher in leading edge, innovative approaches to compliance risk management working closely with our business partners. Capital One leverages cutting edge technology to further its most dynamic and innovative products. This calls for new and creative ways for us to think about compliance and risk in a way that helps the business succeed safely and quickly. Privacy Compliance is at the center of these activities and performs a key risk management role to ensure the business and corporate initiatives comply with applicable federal, state, and international privacy laws and regulations.

The Process and Governance (ProGov) team sits in the second line of defense, is an integral part of Privacy Compliance and Risk (PC&R), and performs key privacy compliance activities that help to manage privacy risk across the company. The ProGov team is responsible for creating and maintaining external privacy disclosures, internal privacy policies, standards, and procedures; creating enterprise-wide training on a variety of privacy laws and regulations; and developing other tools and processes to facilitate a well-managed privacy program across the company. .

• Manage privacy compliance governance and corresponding processes that support our core business lines. This includes reporting, engaging with Audit, creating and maintaining enterprise-wide training and educational resources, and creating and updating external privacy disclosures and internal privacy policies, standards, and procedures;
• Draft, update, and maintain external privacy disclosures and internal policies, standards, procedures, and corresponding training materials;
• Facilitate and respond to audits and exams related to privacy, which includes internal and external requests;
• Maintain subject matter expertise of applicable privacy laws and regulations such as GLBA, FCRA, FACTA, TCPA, TSR, CAN-SPAM, GDPR, CCPA, HIPAA, state breach notification laws, FFIEC guidance, and other federal, state, and international privacy laws as applicable;
• Closely follow emerging privacy trends across the country, including the development of new state and federal privacy laws, regulations, and trends, and understand the impacts to Capital One. Lead regulatory change task engagement and ensure PC&R advisors are aware of regulatory changes and tasks, while developing a process for consistent application;
• Advise on application of privacy requirements, development of controls and monitoring, remediation/corrective action of compliance breakdowns, and changes in law or regulation;
• Evaluate business initiatives and processes from a privacy risk perspective by providing guidance, advice, and effective challenge;
• Actively collaborate with privacy compliance testing by advising on risks and processes necessary for second line testing;
• Review privacy-related complaints and provide guidance on remediation; escalate and consult with subject matter experts, when necessary; and
• Capture, maintain, and analyze compliance data, interpreting it to ensure consistency and adequate Compliance Risk Management, and compiling data into reporting, as necessary.

• Strong organizational skills, clear results orientation, and focus on achieving both short and long term goals;
• A proven track record of proactively supporting and working across business lines and functions and with a senior management team;
• Ability to navigate "gray space" or ambiguous situations to drive and execute an agenda in a fluid environment while managing competing priorities;
• Collaborative, solution-oriented mindset with solid teamwork skills; ability to build and leverage the capabilities of a high-performing team;
• Highly developed interpersonal, presentation, and communications skills (written and oral) coupled with strategic influencing skills and the ability to drive agreement through intellect, interpersonal, and negotiation skills;
• Ability to effectively challenge the first line of defense in a manner that is respectful and geared towards strengthening business initiatives;
• Successful track record of thriving in both a highly regulated industry and a fast paced, entrepreneurial, and dynamic environment;
• Ability to balance operating independently with appropriate escalation and interaction with senior leadership;
• Ability to thrive as a team player and interact with associates across functions, departments, and job levels, both inside and outside the Compliance Department; and
• Understanding of key regulatory and audit requirements and three lines of defense risk management framework.

• Bachelor's Degree or military experience
• At least 3 years of experience in a risk or compliance role within a FinTech, Financial Services, or Technology organization

• Master's Degree
• 6+ years of experience in Privacy compliance, or legal, or audit
• CIPP (Certified International Privacy Professional), or CRCM (Certified Regulatory Compliance Manager)