Bachelor's degree in Computer Science, IT, Law, Business, or related field.
Eight years of experience in Privacy, Compliance, Legal, Information Security, Technology, or Operational Risk.
Experience leading an enterprise privacy program with knowledge of NIST Privacy Framework.
Strong knowledge of privacy laws including GLBA, CCPA, and relevant state laws.
At least one recognized privacy certification or willingness to obtain soon after hiring.
Proven ability to effectively communicate with executives and auditors.
Responsibilities
Own and enhance the enterprise privacy program, covering policies, procedures, and controls.
Monitor privacy laws and direct implementation of necessary organizational changes.
Lead privacy risk management and conduct privacy impact assessments.
Establish and oversee accuracy of data inventories and processing activities.
Govern privacy operations including consumer rights requests and privacy notices.
Oversee privacy reviews of third parties and ensure compliance with regulations.
Collaborate with various departments to operationalize privacy requirements and resolve issues.
Govern privacy aspects of AI platforms including risk assessments and incident management.
Benefits
Health, dental, and vision insurance plans.
401(k) retirement plan with employer match.
Generous paid time off and holidays.
Opportunities for professional development and certification.
Flexible working arrangements to support work-life balance.
Full Job Description
Responsibilities include but are not limited to:
Own and continuously enhance the enterprise privacy program, including policies, standards, procedures, controls, governance, tools, documentation, and reporting across the organization and subsidiaries.
Monitor and interpret applicable privacy laws and regulations (e.g., GLBA, Regulations P and S-P, CCPA/CPRA, and state privacy laws), assess enterprise impacts, and direct implementation of required changes.
Lead privacy risk management, including privacy impact assessments, privacy-by-design reviews, independent challenge, risk acceptance recommendations, and mitigation planning for products, services, systems, vendors, and technologies.
Establish requirements and oversee the accuracy of data inventories, data maps, and records of processing activities covering personal information collection, use, sharing, retention, notices, and disclosures.
Govern privacy operations, including consumer rights requests, consent and preference management, privacy notices, escalations, service levels, controls, and evidence retention.
Oversee privacy reviews of third parties, contracts, and data-sharing arrangements, ensuring appropriate obligations, controls, remediation, monitoring, and control testing are in place.
Partner with Legal, Compliance, Risk, Information Security, Technology, Marketing, Procurement, and business leaders to operationalize privacy requirements and resolve material issues.
Govern privacy aspects of AI platforms and use cases, including intake, risk tiering, assessments, incident management, data subject rights, and alignment with applicable AI risk management frameworks.
Identify, escalate, and oversee remediation of privacy risks, compliance gaps, incidents, complaints, and control weaknesses; represent the program in audits, examinations, breach response, and risk acceptance processes.
Define privacy metrics, KRIs, KPIs, training, and executive reporting; support governance committees and foster enterprise-wide privacy accountability and awareness.
Required Skills:
Excellent written, verbal, and interpersonal communication skills with experience communicating at the Executive level successfully.
Strong knowledge of privacy, compliance, risk management, and control frameworks.
Ability to translate legal and regulatory obligations into practical business and technology requirements.
Ability to establish policy, governance, accountability, monitoring, and reporting frameworks.
Ability to provide independent review, credible challenge, and clear risk-based recommendations.
Ability to communicate effectively with senior management, governance committees, auditors, and regulators.
Strategic thinking, sound judgment, and strong analytical and problem-solving abilities.
Ability to assess materiality, recommend risk acceptance, and escalate significant privacy concerns.
Ability to lead cross-functional initiatives and manage multiple priorities in a dynamic environment.
High integrity, discretion, accountability, and professional judgment.
Ability to prioritize tasks and effectively manage multiple responsibilities in a dynamic environment.
Strong work ethic. Good use of discretion and judgment.
Required Experience:
Bachelor's degree in Computer Science, Information Technology, Law, Business, or a related field and eight years of progressively responsible experience in Privacy, Compliance, Legal, Information Security, Technology, or Operational Risk. Demonstrated experience leading an enterprise privacy program and familiarity with the NIST Privacy Framework, GLBA, CCPA, CPRA, and applicable state privacy laws.
At least one recognized privacy certification, or ability to obtain within a defined period after hire.
Preferred Experience:
Financial services experience; experience advising senior management and interacting with auditors or regulators; technical familiarity with applications, databases, data storage, access management, and AI-enabled technologies.
CIPP/US, CIPM, CDPSE, CISM, CISSP, or comparable privacy, risk, legal, or technology credential.
About USAmeriBancorp
Valley National Bancorp, doing business as Valley Bank, is a regional bank holding company headquartered in Wayne, New Jersey with approximately $42 billion in assets. Its principal subsidiary, Valley National Bank, currently operates over 230 branch locations in northern and central New Jersey, the New York City boroughs of Manhattan, Brooklyn, and Queens, as well as Long Island, Florida, and Alabama. Valley Bank holds approximately $29 billion in assets.
,Valley Bank is one of the largest commercial banks headquartered in New Jersey.
