Business Unit Risk Advisor I – Cyber Data Protection

Role Overview

• Serve as the Data Protection risk Subject Matter Expert (SME), providing guidance on regulations, policies, privacy‑by‑design principles, data‑handling obligations, and risk program requirements
• Partner with first
• and second-line teams to identify, assess, escalate, and remediate risk control gaps; ensure alignment with Enterprise Risk Management standards
• Participate in designing new controls, support control testing, validation, and tuning
• Assess and challenge existing portfolio of Business Unit controls, identify weaknesses, and evaluate remediation efforts for adequate resolution
• Monitor KPIs/KRIs related to Data Protection; escalate deficiencies and open Management Self‑Identified Issues (MSIs) when necessary
• Review and challenge Data Protection model updates, detection strategies, and risk decisions to ensure alignment with risk appetite and industry trends
• Aggregate, analyze, and communicate risk results to stakeholders; escalate material concerns to BU leaders and governance committees
• Oversee adherence to risk appetite limits, including risk identification, prioritization, and acceptance for current and emerging risks
• Provide risk management expertise for strategic initiatives; promote consistent practices and support a strong privacy and risk culture across the enterprise
• Monitor, report, and maintain processes related to emerging risks, regulatory expectations, and enterprise risk‑monitoring requirements
• Coordinate and prepare materials for regulatory exams, audits, working groups, and committee meetings
• Develop and maintain strong relationships with first-, second-, and third‑line partners; collaborate on risk documentation, remediation plans, monitoring, and closure validation
• Conduct root-cause analysis for control weaknesses or threshold breaches; identify governance exceptions, issues, and controls for an aggregate risk view
• Communicate and present risk materials in various forums; provide training and awareness to promote positive risk management behaviors
• Deliver regular risk reporting to drive visibility into holistic risk exposure
• Perform additional activities and special projects as required

Requirements

• Bachelor’s degree in Accounting, Business, Finance or related field, or equivalent education and related training
• 6+ years of experience in a financial institution with emphasis on risk management or equivalent work experience and training, and/or equivalent education, training and experience
• Experience in compliance and operational risk mitigation and remediation
• Strong communication, interpersonal, presentation and negotiation skills
• Proven leadership and management skills
• Strong analytical, problem solving and decision-making skills in complex environments and with senior leadership
• Strong time management and organizational skills adaptable to a dynamic and complex work environment; Capable of handling multiple projects concurrently
• Demonstrated proficiency in basic computer applications, such as Microsoft Office software products
• Ability to travel, occasionally overnight

Benefits

• Medical, dental, vision, life insurance
• Disability
• Accidental death and dismemberment
• Tax-preferred savings accounts
• 401k plan
• 10 days of vacation
• 10 sick days
• Paid holidays
• Potential for defined benefit pension plan, restricted stock units, and/or a deferred compensation plan