Data Privacy Group Manager, Citi

Citi

Location:
United Kingdom, Belfast

Category:
IT - Administration

Contract Type:
Employment contract

Salary:

Not provided

Save Job

Apply Position

Job Description:

The Data Privacy Group Manager is responsible for providing governance and oversight, operational risk management and controls leadership at an enterprise level for activities associated with Privacy risk management. This governance role sits in the IMPaCT:Privacy Office Information Management, Privacy and Cross-border Transfer: Privacy Office (IMPaCT: Privacy Office), and will primarily have responsibility for owning/managing Privacy Standards owned by the first Line of Defence (1LOD), monitoring business/function compliance with the Citi Global Privacy Policy, identification and management of operational risks associated with Privacy, and working across the enterprise to ensure that effective controls and monitoring are in place to reduce risk.

Job Responsibility:

Support the setting of enterprise-wide data privacy obligations through managing and maintaining IMPaCT:Privacy Office-owned privacy Standards in line with the Citi Policy Governance Policy, related Standard, and Procedure
provide input to the design, publication, and maintenance of enterprise controls for data privacy
support management reporting cycles and key indicator development
preparation of clear, accurate and timely reports and escalations on privacy and data protection risks, risk mitigation measures and compliance activities
assess, evaluate, and validate controls through processes and tools such as the MCA and KRIs as appropriate for data privacy risk
support the delivery of privacy tools, training, templates, and other resources to be leveraged by the business to support data privacy compliance across the enterprise
support Process Owner related responsibilities for IMPaCT:Privacy Office owned Business Processes
support the investigation and remediation of privacy incidents where required
responsible for the direction, coordination, implementation, execution, control and completion of program/project and associated dependencies
influences and negotiates with senior leaders (across functions)
may communicate and coordinate with external parties i.e., third party vendors
support periodic reviews of Business and Function data privacy processes and controls, and validate changes as a result of such reviews
track and review deviations and risk acceptances when raised and at the time of renewal to assess the need for deviations and ascertain that the business has implemented and documented effective compensating controls
follow Escalation Policy and procedures to ensure effective escalation and socialization of material risk events and issues across businesses for any data privacy related items
track Issue and CAP status and progress for data privacy related items and proactively escalate as appropriate
support IMPaCT:Privacy Office owned Issues and CAPs from planning, to remediation, to closure
support the Business and Functions on reviews and audits related to Data Privacy
support the business on reviewing and responding to findings by reviewers
coordinate and support the Business in the implementation of global, regional and local Data Privacy, regulatory and risk and control projects
ensure high quality execution for Data Privacy programs for any Citi initiated programs, in coordination with Global Risk and Control and In Business Regulatory Engagement Head
leads and directs a team of professionals, including management of people, to include performance evaluation, compensation, hiring, disciplinary actions/terminations and budget approval

Requirements:

Relevant experience in Risk and Control field
prior experience of ownership/management of controlled documentation e.g. Policies, Standards, Procedures is desirable
proactivity in problem-solving and information gathering to define frameworks, processes and procedures to effectively manage privacy risk
working knowledge of Data Privacy Compliance laws, rules, regulations, risks, and appropriate controls
familiarity with privacy related technology considerations such as cookies, mobile devices, biometric and geolocation data is desired
sound judgement with the ability to take a leadership position on Data Privacy issues
strong business analysis competency in shaping opportunities via conceptual thinking and abstract problem-solving capabilities
communicates effectively, develops and delivers multi-mode communications that convey a clear understanding of the unique needs of different audiences
able to drive consensus, and influence relationships at all levels
collaborates effectively by building partnerships and working well with others to meet shared objectives
strong negotiation, influencing and stakeholder management skills across a variety of stakeholders at different levels
optimizes work processes by balancing effective/efficient processes with a focus on continuous improvement
demonstrates ability to balance between understanding the 'big picture' while paying close attention to detail
up-to-date understanding of key data privacy risk and control concepts, tools and trends
proficient in the use of basic Microsoft applications (Word, Excel, PowerPoint), and SharePoint
organizational savvy
understands systems, management processes, knows where to go for information and how to interpret it
Bachelor’s/University degree, Master’s degree preferred

Nice to have:

familiarity with privacy related technology considerations such as cookies, mobile devices, biometric and geolocation data
Master’s degree preferred

What we offer:

equal opportunity employer
focus on well-being, growth, and work-life balance

Additional Information:

Job Posted:
August 22, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Data Privacy Group Manager