Privacy Program Manager - Remote

Join the People Helping People

Velera is the nation's premier payments credit union service organization (CUSO) and an integrated fintech solutions provider. The company serves more than 4,000 financial institutions throughout North America, operating with velocity to help our clients keep pace with the rapid momentum of change and fuel growth in the new era of financial services. Our purpose : We accelerate partners' success through innovative financial technology solutions and inspired service.

The Opportunity

The Privacy Program Manager will be responsible for establishing and maintaining all aspects of an enterprise-wide privacy program framework at the department, business, and functional area levels. The individual will work as part of the regulatory compliance and privacy team and be responsible for establishing and maintaining enterprise-wide related privacy policies / procedures, privacy impact assessments / risk assessments, metrics, enterprise-wide privacy training, and ensuring compliance with applicable privacy requirements. The individual must have good knowledge of privacy / data protection laws and the ability to interpret privacy legislation, laws / regulations, and advise the VELERA business and functional areas on how to bring the company into compliance with complex privacy-related legal, regulatory, and / or policy requirements. They work with leadership, including senior management, and are accountable for identifying key collaborators and advising on privacy-related legal / compliance requirements. This individual is part of the second line of defense on the privacy and / or regulatory compliance team and participates in council meetings. The successful individual will have credibility and be able to influence privacy matters. They have strong written and verbal communication skills to communicate with all leadership levels within the organization, as well as the ability to establish collaborative relationships within the company.

Day in the Life

• Develops, improves, and promotes the privacy framework, in conjunction with the vision of direct leadership, and directs and coordinates the privacy program, including associated risk to the organization.
• Provides thought leadership, advice, and recommendations to managers and leadership.
• Provides strategic guidance and supports the business, functional, and compliance teams to assess, develop, and implement enhanced privacy controls and processes to support program implementation, oversight, and monitoring.
• Provides input to design and maintains ongoing privacy training to enhance enterprise-wide privacy risk management knowledge and culture.
• Develops insight and maintains transparency around privacy risk for managers, leadership, committees, and senior management on the performance of privacy program / activities within the organization.
• Acts as a primary point of contact within the organization for members of staff and regulators on issues related to privacy.
• Promotes a culture of privacy compliance across the organization through Policy, Process, and / or Procedures; provides guidance to resolve privacy issues brought up from business and functional areas representatives.
• Maintains, writes, and updates policies to ensure continued alignment with privacy laws and regulations in the jurisdictions in which VELERA transacts or operates, as applicable. Examples may include, but are not limited to, privacy-related laws in U.S. states or territories, the General Data Protection Regulation (GDPR), Canada PIPEDA, Bermuda PIPA, and the California Consumer Protection Act.
• Monitor changes to privacy laws and regulations, and make recommendations to the business and functional areas, as appropriate. Maintain an awareness of industry best practices in order to ensure an effective and dynamic privacy framework.
• Monitor operational privacy practices to assess adherence to corporate policy requirements and provide assurance that relevant privacy processes are effectively embedded into the business.
• Perform Privacy Impact Assessments ('PIAs') to ensure that all relevant privacy changes are captured and assessed in a timely fashion.
• Manage the Data Subject Access Request (DSAR) process, including reviewing, validating, and responding to requests and maintaining a repository of requests and responses.
• Provide regulatory input to data incident management as needed, working closely with Legal, Investigations & Corporate Fraud, IT, and InfoSec teams to ensure appropriate and timely resolution.
• Review vendor contracts in partnership with the firm's Legal, Vendor Risk Management, Procurement, Compliance, and Information Security functions, to ensure inclusion of appropriate privacy-related contractual clauses.
• Participate in the relevant compliance and / or data governance councils and / or committees, and provide input to leadership and / or other group councils, as required.
• Report on data privacy matters to leadership and key collaborators, appropriately escalating any privacy risks as required.
• Exhibit indirect leadership and influence to ensure that people, resources, and processes are aligned with VELERA's privacy framework and deliver the required standards of performance.
• Perform other duties as assigned.

Qualifications :

About Velera

At Velera we are committed to fostering a workplace where every employee feels valued, respected, and connected. We understand, attract and engage a diverse workforce where every employee can live up to their full potential; ensuring that our employee base reflects the consumers we serve. The result of this effort is an inclusive environment where diverse talent thrives. We strive to foster a safe and inclusive work environment for people to bring their authentic selves in order to build a better community within our company and with our partners.

Pay Equity

$95,800.00 - $124,500.00 Actual Pay will be adjusted based on experience and other job-related factors permitted by law.

Great Work / Life Benefits!

Velera is an Equal Opportunity Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state or local law.