VP, Personal Data Rights and Privacy - Compliance

Wintrust is a financial holding company with approximately $62 billion in assets whose common stock is traded on the NASDAQ Global Select Market. Guided by its “Different Approach, Better Results” philosophy, Wintrust offers the sophisticated resources of a large bank while providing a community banking experience to each customer. Wintrust operates more than 200 retail banking locations through 16 community bank subsidiaries in the greater Chicago, southern Wisconsin, west Michigan, northwest Indiana, and southwest Florida market areas. In addition, Wintrust operates various non-bank business units, providing residential mortgage origination, wealth management, commercial and life insurance premium financing, short-term accounts receivable financing/outsourced administrative services to the temporary staffing services industry, and qualified intermediary services for tax-deferred exchanges. Our unique business model is a competitive strength and value driver, powered by our talented colleagues who put our customers first and achieve better results for our clients.

Why join us?

• An award-winning culture! We are rated a Top Workplace by the Chicago Tribune (past 11 years) and Employee Recommended award by the Globe & Mail (past 6 years).

• Competitive pay and discretionary or incentive bonus eligible.

• Comprehensive benefit package including medical, dental, vision, life, a 401k plan with a generous company match and tuition reimbursement to name a few

• Promote from within culture.

Why join this team?

• Hybrid Work Schedule – Split your time working remotely and at our Corporate Headquarters in Rosemont, IL.

• We foster an inclusive environment for an individual to grow and work independently.

• Opportunity to interact with management level, experienced professionals - higher visibility.

• Wintrust has a great compliance culture that comes from the top.

• Gain experience and further your career by joining a growing organization.

Position Overview

The Wintrust Personal Data Rights and Privacy Officer will serve as a good steward of customer data and work in collaboration with the information security and data governance teams to protect the privacy and data rights of Wintrust’s customers and consumers.  They will enhance and manage a strong Privacy program that defines, develops, connects, maintains and implements policies and processes that enable consistent, effective privacy practices which minimize risk and provide for the confidentiality of NPI/PCI/PHI/PII, paper and/or electronic, across media types.  Privacy and personal data rights is intended to be inclusive of, but is not limited to, the following rules:  GLBA/Regulation P, CCPA, TCPA, FCRA, COPPA, HIPAA, PCI, PIPEDA, GDPR, Personal Data Rights rules, and other applicable consumer protection and data rights rules.)

What You’ll Do

• Work with organization senior management, security, and data governance to develop a Personal Data Rights and Data Privacy Compliance program that integrates into the WTFC Compliance Risk framework, the Data Management Program, IT risk management framework, Information Security Program, and the PCI program.  This includes developing key performance metrics, reporting, and escalation to evaluate bank and consumer data privacy risk.

• Manage partnerships with CSO, CDO, Risk Management, HR, Fair Banking, and Legal to ensure a consistent approach to Privacy and Personal Data Rights Compliance overseeing the risk for the bank and the consumer.  

• Provide expert consultation to senior leadership and associate teams on privacy and personal data rights compliance-related matters, key policy requirements, impact of new products, transactions, market segments, and/or strategic initiatives.

• Perform and oversee initial and periodic Privacy risk assessments, documentation of controls and mitigation efforts, and remediation, incorporating or rolling up existing risk assessment programs/processes where appropriate, including specific risk assessments required like PCI, HIPPA, etc.

• Oversee communication of privacy policies, notices, and practices to customers. Maintains the Privacy Policy and recommends appropriate changes to corresponding program policies, procedures, and standards to meet objectives and regulatory change.

• Serve as a subject matter expert who provides education to and liaise with Compliance Officers, the Business, and control partners to support the identification and assessment of compliance risks associated with organizational activities, including developing new products, services, client relationships, training programs and business practices. Provides oversight of the implementat