Compliance Manager

Description

Are you passionate about data privacy and ready to grow your career in risk management?

Join us as a Privacy Risk Professional and play a pivotal role in strengthening our enterprise privacy and compliance efforts. You’ll help drive Citizens’ customer-first, innovation-driven growth by identifying, assessing, and managing privacy risks across business lines. This role offers valuable exposure to financial institution operations, laws and regulations, cybersecurity, and data protection practices.

As a Privacy Manager, you’ll execute our Privacy Office strategy to ensure compliance with Citizens policies and evolving privacy laws and regulations. You’ll champion Privacy by Design (PbD) across the organization, leveraging your technical skills and data-driven mindset to build dashboards, analyze metrics, and support strategic decision-making. Bonus points if you bring a great sense of humor—we value personality as much as professionalism!

Key Responsibilities

• Collaborate with business lines to identify, mitigate, and escalate privacy risks
• Conduct privacy vendor assessments with internal stakeholders and third-party teams
• Implement Privacy by Design practices to proactively address privacy risks
• Drive cross-functional strategies to ensure compliance with Citizens policies and current/future privacy laws
• Provide guidance and challenge to business units on privacy-related risks
• Assess privacy controls for compliance with laws, regulations, and internal policies
• Perform independent risk assessments across regulatory frameworks (GLBA, GDPR, CCPA, COPPA, TCPA, CAN-SPAM, etc.)
• Complete Privacy Impact Assessments for new initiatives and products
• Support investigations and remediation of privacy incidents
• Design and analyze key risk and performance metrics to identify trends and measure program effectiveness
• Partner with Second Line of Defense teams to enhance risk culture and control effectiveness
• Contribute to the development and continuous improvement of the Privacy Program
• Use data analytics tools to manage privacy-related data and generate actionable insights

Qualifications

• 2+ years of experience in privacy or related risk domains
• Strong understanding of privacy risks in banking and experience building privacy programs
• Experience with marketing/ad tech privacy risks preferred
• Familiarity with consent and preference management laws preferred
• Incident response experience, including investigations and notifications, is a plus
• Ability to interpret and apply privacy laws and policies to real-world scenarios
• Legal research skills preferred

Skills & Attributes

• Detail-oriented and thorough in handling sensitive data
• Excellent communicator who can simplify complex privacy concepts
• Collaborative team player open to feedback and cross-functional work
• Independent self-starter who can prioritize and execute tasks with minimal oversight
• Critical thinker with strong problem-solving and risk assessment abilities
• Technically proficient in Microsoft Excel (pivot tables, VLOOKUP, formulas, visualization)
• Experience with tools like OneTrust, Tableau, Python, Gen AI, SQL is preferred
• Comfortable working with large datasets and using data to drive decisions
• Proficient in Microsoft Office suite

Education & Certifications

• Bachelor’s degree required
• IAPP certification strongly preferred
• CISSP/CISA certification welcomed
• AWS Cloud Practitioner certification welcomed
• AI governance certification welcomed

#LI-Citizens6

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.