Head of Data Protection Office

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions, enabling the communities we support to grow and succeed in the right ways, all more confidently and more often—that’s what we call the courage to thrive.   We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive. Try new things, learn new skills and discover what you excel at—all from Day One.

As a wholly owned subsidiary of U.S. Bank, Elavon is committed to building the platforms and ecosystems that help over 1.5 million customers around the world to achieve their financial goals—no matter what they need. From transaction processing to customer service, to driving innovation and launching new products, we’re building a range of tailored payment solutions powered by the latest technology. As part of our team, you can explore what motivates and energizes your career goals: partnering with our customers, our communities, and each other.

We actively uphold transparent and fair hiring practices that support individual opportunity, inclusive culture, and career mobility across all levels of our organisation.

We offer meaningful opportunities for growth, a culture of inclusion, and a strong commitment to transparency and integrity in everything we do.

Job Description

The role holder will report to the Head of Compliance and will play a key role in the delivery of the Bank’s overall EU Data Protection/Privacy strategy and risk management.

The role holder is expected to be a subject matter expert in EU Data Protection/Privacy laws and regulation, with demonstrable experience in practical application of international privacy laws and regulations in the financial services arena.

Key responsibilities include: providing privacy/data protection related advice and guidance on a variety of data privacy requirements including, but not limited to, general data processing, new business initiatives and commercial offerings, third country data transfers, maintaining a register of processing activities, assistance with the investigation and management of potential data breaches, conducting Data Protection Impact Assessments, research into emerging privacy laws and trends, developing and delivering training etc.

The position will interact with other key bank functions including Legal, Operational Risk, Information Security, Risk Management and Operations.

Due to the responsibilities associated with the role adjustments to internal reporting lines, in accordance with regulatory requirements, may be deemed appropriate.

Accountabilities:

• Inform and advise the Bank and its employees on applicable Privacy laws, Regulations and Enforcement, monitoring and reporting on new developments and trends across Europe.

• Monitor compliance with applicable data protection regulations and corporate policies.

• Support completion of Data Protection Impact Assessments across new projects and business initiatives, as required.

• Providing advice and guidance on day-to-day privacy/Data Protection queries.

• Lead the investigation and management of potential breaches/instances of non- compliance, providing recommendations as a result of those recommendations.

• Interact with the First Line of Defence regarding privacy and data protection issues.

• Regularly review and refresh policies, procedures and guidelines.

• Develop and maintain strong relationships with the network of privacy/data protection professionals across the Bank and its parent (US Bank).

• Develop materials and tools that support education, training and awareness. Including design and implement privacy training or communications to business teams. Support the on-going development and delivery of multi-channel training programmes on Data Protection and internal data awareness initiatives.

• Oversight of and responsibility for investigation and resolution of data protection issues and implementation of corrective actions plans.

• Determine and manage regulatory privacy filings as necessary.

• Provide practical guidance and advice to the business on a variety of Data Protection matters.

• Work collaboratively with the Information Security, Legal and Risk departments to develop and drive implementation across the business of best practices, procedures, tools and checklists to support the implementation of Bank’s GDPR data protection programme.

• Lead aspects of Bank’s data protection programme such as governance framework, metrics and reporting.