Head of Data Protection Office - Europe

The role holder will report to the Head of Compliance and will play a key role in the delivery of the Bank’s overall EU Data Protection/Privacy strategy and risk management.

The role holder is expected to be a subject matter expert in EU Data Protection/Privacy laws and regulation, with demonstrable experience in practical application of international privacy laws and regulations in the financial services arena.

Key responsibilities include: providing privacy/data protection related advice and guidance on a variety of data privacy requirements including, but not limited to, general data processing, new business initiatives and commercial offerings, third country data transfers, maintaining a register of processing activities, assistance with the investigation and management of potential data breaches, conducting Data Protection Impact Assessments, research into emerging privacy laws and trends, developing and delivering training etc.

The position will interact with other key bank functions including Legal, Operational Risk, Information Security, Risk Management and Operations.

Due to the responsibilities associated with the role adjustments to internal reporting lines, in accordance with regulatory requirements, may be deemed appropriate.

Accountabilities:

• Inform and advise the Bank and its employees on applicable Privacy laws, Regulations and Enforcement, monitoring and reporting on new developments and trends across Europe.

• Monitor compliance with applicable data protection regulations and corporate policies.

• Support completion of Data Protection Impact Assessments across new projects and business initiatives, as required.

• Providing advice and guidance on day-to-day privacy/Data Protection queries.

• Lead the investigation and management of potential breaches/instances of non- compliance, providing recommendations as a result of those recommendations.

• Interact with the First Line of Defence regarding privacy and data protection issues.

• Regularly review and refresh policies, procedures and guidelines.

• Develop and maintain strong relationships with the network of privacy/data protection professionals across the Bank and its parent (US Bank).

• Develop materials and tools that support education, training and awareness. Including design and implement privacy training or communications to business teams. Support the on-going development and delivery of multi-channel training programmes on Data Protection and internal data awareness initiatives.

• Oversight of and responsibility for investigation and resolution of data protection issues and implementation of corrective actions plans.

• Determine and manage regulatory privacy filings as necessary.

• Provide practical guidance and advice to the business on a variety of Data Protection matters.

• Work collaboratively with the Information Security, Legal and Risk departments to develop and drive implementation across the business of best practices, procedures, tools and checklists to support the implementation of Bank’s GDPR data protection programme.

• Lead aspects of Bank’s data protection programme such as governance framework, metrics and reporting.

• Manage team, partners and stakeholders across multiple sites and jurisdictions.

• Support and enable the business to deliver business outcomes through provision of practical, solution orientated, sound guidance and advice on data protection and privacy matters.

Experience Required:

• A relevant third level qualification (e.g. law, IT, cyber security etc.).

• A specific Data Protection qualification/certification e.g. CIPP/E, CIPP/M.

• 7-10 years’ experience in [Financial Services] and in a compliance, legal, risk or internal control role preferred.

• Demonstrable work experience and a proven track record of dealing with data protection and privacy issues.

• Experience engaging with external parties on data protection issues (regulators, customers, industry associations, etc.)

• Excellent organizational and project management skills with strong attention to detail.

• Experience of owning group wide strategic projects from conception to delivery.

• Previous management experience preferred.

• Flexible approach and a strong team player.

• Experience working collaboratively and effectively with cross-functional teams.

• Ability to build and maintain relationships vital.

• Systematic thinker – takes a well-ordered and proactive approach to analysing problems, organizing work and planning action / execution in a fast-paced environment.

This role has been identified as a Controlled Function (“CF”) under the Regulations.

Accordingly, the Company must be satisfied on reasonable grounds that the role holder complies at all times with the requirements of the Fitness and Probity Regime and the Conduct Standards (as applicable to the role).

Applicants agree to permit the Company (or its agents) to conduct such due diligence as it deems necessary to satisfy itself on reasonable grounds that you comply with the requirements of the Fitness and Probity Regime and the Conduct Standards (as applicable to the role) and that you will provide the Company with all information and/or documentation relating to your qualifications, experience, employment history, financial soundness and other interests that the Company requests for that purpose.

It is the individual responsibility of every employee to maintain a current awareness and understanding of and to fully comply with U.S. Bank’s “Code of Ethics”. Each employee is also expected to maintain an awareness of the laws, regulations, internal policies and procedures that are appropriate for his/her position.

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.