Old National Bank
Old National Bank was established in 1834. Today, we are the largest financial services holding company headquartered in Indiana. We provide an array of services to our clients which include Community Banking, Investments, and Wealth Management. At Old National, we believe that by helping our associates balance work life with home life, we create a more productive workforce and a stronger company.
Key Accountabilities
- Builds a strategic and comprehensive data privacy program that defines, develops, maintains, and implements policies and processes that enable consistent, effective privacy practices that minimize risk and ensure the confidentiality of protected information, paper and/or electronic, across all media types. Ensures privacy forms, policies, standards, and procedures are up to date
- Provides periodic updates to Executive Leadership Team
- Works with senior organization management, Information Security / Cybersecurity management, Corporate Compliance, Third-Party Risk Management, and other risk management teams as needed to establish and monitor governance for the privacy program
- Law Change / Privacy Oversight / Monitoring – Accountable to partner with the Legal team on policy & governance alignment with applicable laws/regs
- Maintain Data Policy and Privacy Policy/Standards across the organization
- Maintain Privacy Notice(s) – Accountable SME for notice expectations; Collaborate on annual review with other key stakeholders in support of reg/law requirements based on ONB’s data sharing practices; Oversee annual notice review, required updates (notice, systems, etc)
- Data Privacy Impact Assessments – build/maintain framework to assess corporate controls and project for privacy risks
- Maintain data classification standards and monitor implementation across the data landscape
- Accountable person in response to privacy issues and complaints, including primary collaborator / SME with the Incident Response team for any privacy incident and breaches
- Develop, implement, and manage data sharing use case framework
- Partner closely with Enterprise Architecture to build in Data Privacy by Design for strategically significant projects.
- Creating and maintaining applicable training for key stakeholders, team members, clients, etc. and SME support for other applicable training conducted.
- Data Quality Issue Oversight & Management – manage central data quality issue log and ensure timely progress is made.
- Administer the Data Strategy Executive Committee – provides critical program management for the committee meeting, encompassing material publication, charter maintenance, minutes, central storage, etc.
- Chief Data Office Audit Partner/Liaison – lead manager across the Chief Data Office to manage audit efforts and responses.
Qualifications and Education Requirements
- Bachelor’s degree in related field; advanced coursework/training related to law, data privacy, computer science, and management information systems.
- 5+ years’ experience in banking and finance
- 8+ years’ experience in developing Data Privacy Programs
- 5+ years’ experience working with Data Governance
- 8+ years’ experience working with Developing and implementing data policy and standards
- Knowledge of industry leading practices in Data Privacy, i.e. CCPA, HIPAA, NYPA, GDPR
- Solid written, verbal, and interpersonal skills
- Demonstrated ability to communicate and lead culture change initiatives
- Demonstrated ability to understand data protection framework, data in motion, data at rest, and data in use
- Strong project management skills
Old National is proud to be an equal opportunity employer focused on fostering an inclusive workplace and committed to hiring a workforce comprised of diverse backgrounds, cultures and thinking styles.
As such, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, status as a qualified individual with disability, sexual orientation, gender identity or any other characteristic protected by law.
We do not accept resumes from external staffing agencies or independent recruiters for any of our openings unless we have an agreement signed by the Talent Acquisition Director, VP, to fill a specific position.