Privacy Program and Advisory Lead
Reporting to the Chief Privacy Officer, the Privacy Program and Advisory Lead within the Second Line of Defense (SLOD) is responsible for facilitating the development and implementation of Comerica's Privacy Program in alignment with corporate objectives, the Enterprise Risk Management Framework, industry best practices, and regulatory requirements. This position provides ongoing guidance to the business as well as leads the implementation and ongoing development of the Privacy program. This individual is required to closely interact with Compliance Advisory Leads and key stakeholders in all lines of business across Comerica.
Position Responsibilities:
Privacy Program Development and Implementation
- Assist the Chief Privacy Officer in developing, implementing, and maintaining Comerica's privacy program.
- Update policies, procedures and program materials regularly.
- Manage Comerica's cross-functional Privacy Working Group by facilitating monthly sessions with senior stakeholders in all lines of business across the Bank.
- Support regulatory change management activities, including state privacy law developments and assessing applicability to Comerica and escalating to senior leadership as needed.
- Develop/update privacy training and awareness materials for the business regularly.
- Assist with monitoring and testing activities by identifying areas of privacy risk to be assessed and advising the central Compliance team of those throughout the review process.
- Enhance privacy risk assessments by identifying control points for integration of new privacy questions, reviewing high risk responses and providing advice based on industry and regulatory trends.
- Identify risks and mitigation strategies and present them to senior leadership for execution.
- Develop metrics and report to senior leadership to convey status and maturity of the privacy program.
- Improve Comerica's privacy breach response processes by working with the Cybersecurity and Technology teams to integrate and coordinate privacy incident response.
Business Partnership
- Partner with Compliance Advisory Leads to assist the business with initiatives that involve personal information.
- Respond to inquiries from all lines of business related to personal information processing (e.g., GLBA, HIPAA, CCPA related questions).
- Advise the business during organization wide risk assessment processes (e.g., RCSA, CRA).
Additional Duties
- Accept special projects in support of the team and community involvement.
- Other duties as assigned.
Position Qualifications:
- Bachelor's Degree (preferably in Business, Legal, IT or related field) from an accredited university OR in lieu of a bachelor's degree, a High School diploma or GED and 6 years of Risk Management or other related experience in the Financial Services industry
- 6 years of experience in Privacy program management, regulatory compliance, risk management, data governance and/or related legal experience, preferably in the financial services industry
- 5 years of experience developing and maintaining privacy programs
- 3 years of experience working with lines of business in interpreting and applying relevant rules, laws, and regulations to the business
Licenses/Certifications:
- CIPP/US -- Certified Information Privacy Professional or CIPM -- Certified Information Privacy Manager preferred
About Comerica
We know our employees are critical to our overall success and we are dedicated to investing in their future. One of the ways we do this is to offer a comprehensive Total Rewards package designed to recognize and reward individual performance, as well support health, well-being, development and security for our colleagues and their family. Total Rewards consists of cash compensation, development and flexible benefit programs designed to meet individual needs today and in the future. Your salary will be commensurate with your work experience and our programs are reviewed regularly to ensure each remain competitive. We are proud to offer benefits such as health and welfare programs, strong retirement benefits, and generous paid time off programs. You and your eligible family members, including domestic partners and their children, can participate in medical, dental, and vision benefits, 401(k) and pension, income protection benefits such as life insurance, AD&D, and supplemental health programs to offset unexpected health care expenses. We also have a variety of time off programs for things like vacation, sick time, disability, and parental leave. Eligibility for some programs varies based on employment status and tenure.
Upon offer, Comerica conducts a comprehensive background and fingerprint check. Your fingerprints will be used to check the criminal history records of the FBI and may be subscribed in the FBI's Record of Arrest and Prosecution Background ("RAP Back") service, which provides ongoing notification to the Company of any updates to your criminal history.
NMLS certification requirement: where applicable, a favorable background check screening, credit check, fingerprint check, and NMLS certification is required in accordance with the SAFE Act.
Comerica Incorporated (NYSE: CMA) is a financial services company headquartered in Dallas, Texas, and strategically aligned into three major business segments; the Commercial Bank, the Retail Bank, and Wealth Management. Comerica's colleagues focus on relationships, and helping people and businesses be successful. In addition to Texas, Comerica Bank locations can be found in Arizona, California, Florida and Michigan, with select businesses operating in several other states, as well as in Canada and Mexico.
Comerica is proud to be an Equal Opportunity Employer - disability/veteran.
|
Comerica Bank
life insurance, parental leave, paid time off, sick time, 401(k)
Jun 28, 2025