Senior Privacy & Data Risk Analyst (Technical)

Overview

To review, analyze, and report on Navy Federal's risk exposure related to data privacy, data processing, and artificial intelligence (AI) usage. To partner with product and engineering teams to identify and mitigate privacy risks. Provide recommendations to senior leadership regarding data privacy and risk management activities and ways to improve methodologies and practices. Respond to regulatory data processing and privacy requirements and drive alignment of Navy Federal's business, product, and data activities to those requirements. Provide frameworks and recommendations for the ethical and responsible use of data and models across the enterprise.

Responsibilities

• Act as a technical Privacy Center of Excellence SME, identifying best practices related to privacy by design, privacy engineering, privacy enhancing technologies (PETs), and AI risks; educate and build awareness among data analysts, engineers, modelers, and developers
• Secure support in operationalizing compliance, building privacy by design principles into the product lifecycle, and recommend frameworks to drive the ethical and responsible use of data and models across Navy Federal
• Create and maintain strong working partnerships with stakeholders such as Office of General Counsel, Compliance, Procurement and Vendor Management, Information Security, Enterprise Risk, Enterprise Technology Services, and Internal Audit to drive cross functional privacy risk mitigation
• Support 2nd line of defense in conducting Privacy Impact Assessments and/or AI Impact Assessments of Navy Federal systems and new and innovative processes, tools, and technologies
• Collaborate with ER, Internal Audit, Compliance and Office of General Counsel to develop controls to manage privacy risk; act as advisor to product development, analytical, and engineering teams in implementing the controls
• Stay abreast of significant data-related initiatives at Navy Federal( e.g. open banking, AI initiatives) and engage with stakeholders to provide subject matter expertise; guide prioritization of initiatives based on balanced judgment of risk and importance to the enterprise
• Conduct benchmarking for and assist in creating and maintaining policies, standards, and procedures related to privacy consistent with financial services laws, regulations, and best practices
• Continually improve knowledge of data privacy, AI governance, and data risk; complete continuing education to improve expertise in current and evolving privacy matters and maintain certifications

Qualifications

• Understanding of internal and external data flows and their impact to privacy
• Understanding of information security concepts and privacy enhancing technologies such as encryption, anonymization, pseudonymization, de-identification, differential privacy, and synthetic data
• Knowledge and understanding of federal and state laws and regulations governing data privacy and protection
• Professional certification in technical Data Privacy, such as Certified Information Privacy Technologist (CIPT) or Certified Data Privacy Solutions Engineer (CDPSE)
• Excellent communication and analytical skills that demonstrate the ability to distill complex challenges into actionable solutions
• Advanced skill communicating thoughts, concepts, practices effectively at all levels, adjusting as needed to a target audience
• Bachelor's degree in Business Administration, Information Management or related field, or the equivalent combination of education, training, and experience

Desired Qualifications

• Proficiency in US federal and state privacy law and regulations applicable to financial institutions
• Advanced knowledge of Navy Federal functions, philosophy, operations, and organizational objectives
• J.D. or Master's degree in Information Systems, Cybersecurity, or related field

Hours: Monday - Friday, 8:00AM - 4:30PM

Locations: 820 Follin Ln. Vienna, Virginia 22180 | 141 Security Drive Winchester, VA 22602 | 5550 Heritage Oaks Dr. Pensacola, FL 32526

About Us