Data Privacy Officer

Valley Bank; Morristown (NJ); On-site; USD 120,000 - 180,000; Full time

Job summary

Valley Bank is seeking a Data Privacy Officer to lead and govern the enterprise privacy program across the organization and its subsidiaries, ensuring compliance with evolving laws and embedding privacy into processes and technology.

The role advises senior management, oversees incidents, training, and regulatory activity, and partners with Legal, Compliance, Risk, and IT to operationalize privacy requirements and AI governance.

Qualifications

• Bachelor’s degree in CS/IT/Law/Business.
• 8+ years in Privacy, Compliance, Legal, or Risk domains.
• At least one recognized privacy certification.
• Familiarity with NIST Privacy Framework, GLBA, CCPA/CPRA, and state laws.
• Ability to translate obligations into practical tech requirements.

Responsibilities

• Own and enhance the enterprise privacy program with policies, controls, and governance.
• Monitor privacy laws and regulations; direct implementation of changes.
• Lead privacy risk management, PIA reviews, and risk mitigation.
• Maintain data inventories, maps, and records of processing activities.
• Govern privacy operations: consumer rights, notices, and testing.
• Oversee third-party privacy reviews and data-sharing obligations.
• Partner with Legal, Compliance, Risk, IS, Tech, Marketing, and Procurement.
• Govern privacy aspects of AI platforms and risk management frameworks.
• Identify, escalate, and remediate privacy risks; support audits.
• Define privacy metrics and executive reporting.

Skills

Executive communication

Privacy frameworks

Risk management

Policy governance

Regulatory liaison

Independent challenge

Cross-functional leadership

Data mapping

AI privacy

Education

Bachelor's degree (CS/IT/Law/Business)

CIPP/US

CIPM

CDPSE

CISM

CISSP

Job description

At Valley Bank, we believe in people's growth potential. We invest in it. We protect it. We focus it. For nearly 100 years, we've been the Bank that clients from every industry turn to for our expertise, strategies, and advice--building the kind of trust that can fuel every goal. We are the leading relationship bank built for growth--with over $60 billion in assets, 3,800 experts, and more than 200 consumer branches and commercial banking offices in communities across the US.

At Valley, we're all driven by an ambition that goes deeper than just having a job. That's why when you work for us, we make it our goal to help you focus on what drives you--working to turn your passions and strengths into assets you can use to propel your ambitions and build the professional legacy you want. Because when we say we're a relationship bank built for growth, that's not just reserved for our clients--that includes all our associates as well.

The Data Privacy Officer is accountable for leading and governing the enterprise privacy program, ensuring compliance with evolving privacy laws and embedding privacy requirements into business processes, technologies, third-party relationships, and AI initiatives. The role advises senior management, provides independent challenge and escalation of privacy risk, and oversees privacy operations, regulatory activity, reporting, training, and incident response,

Responsibilities Include But Are Not Limited To

• Own and continuously enhance the enterprise privacy program, including policies, standards, procedures, controls, governance, tools, documentation, and reporting across the organization and subsidiaries.
• Monitor and interpret applicable privacy laws and regulations (e.g., GLBA, Regulations P and S-P, CCPA/CPRA, and state privacy laws), assess enterprise impacts, and direct implementation of required changes.
• Lead privacy risk management, including privacy impact assessments, privacy-by-design reviews, independent challenge, risk acceptance recommendations, and mitigation planning for products, services, systems, vendors, and technologies.
• Establish requirements and oversee the accuracy of data inventories, data maps, and records of processing activities covering personal information collection, use, sharing, retention, notices, and disclosures.
• Govern privacy operations, including consumer rights requests, consent and preference management, privacy notices, escalations, service levels, controls, and evidence retention.
• Oversee privacy reviews of third parties, contracts, and data‑sharing arrangements, ensuring appropriate obligations, controls, remediation, monitoring, and control testing are in place.
• Partner with Legal, Compliance, Risk, Information Security, Technology, Marketing, Procurement, and business leaders to operationalize privacy requirements and resolve material issues.
• Govern privacy aspects of AI platforms and use cases, including intake, risk tiering, assessments, incident management, data subject rights, and alignment with applicable AI risk management frameworks.
• Identify, escalations, and oversee remediation of privacy risks, compliance gaps, incidents, complaints, and control weaknesses; represent the program in audits, examinations, breach response, and risk acceptance processes.
• Define privacy metrics, KRIs, KPIs, training, and executive reporting; support governance committees and foster enterprise-wide privacy accountability and awareness.

,

Required Skills

• Excellent written, verbal, and interpersonal communication skills with experience communicating at the Executive level successfully.
• Strong knowledge of privacy, compliance, risk management, and control frameworks.
• Ability to translate legal and regulatory obligations into practical business and technology requirements.
• Ability to establish policy, governance, accountability, monitoring, and reporting frameworks.
• Ability to provide independent review, credible challenge, and clear risk-based recommendations.
• Ability to communicate effectively with senior management, governance committees, auditors, and regulators.
• Strategic thinking, sound judgment, and strong analytical and problem-solving abilities.
• Ability to assess materiality, recommend risk acceptance, and escalations of significant privacy concerns.
• Ability to lead cross-functional initiatives and manage multiple priorities in a dynamic environment.
• High integrity, discretion, accountability, and professional judgment.
• Ability to prioritize tasks and effectively manage multiple responsibilities in a dynamic environment.
• Strong work ethic. Good use of discretion and judgment.

Required Experience

• Bachelor's degree in Computer Science, Information Technology, Law, Business, or a related field and eight years of progressively responsible experience in Privacy, Compliance, Legal, Information Security, Technology, or Operational Risk. Demonstrated experience leading an enterprise privacy program and familiarity with the NIST Privacy Framework, GLBA, CCPA, CPRA, and applicable state privacy laws.
• At least one recognized privacy certification, or ability to obtain within a defined period after hire.

Preferred Experience

• Financial services experience; experience advising senior management and interacting with auditors or regulators; technical familiarity with applications, databases, data storage, access management, and AI-enabled technologies.
• CIPP/US, CIPM, CDPSE, CISM, CISSP, or comparable privacy, risk, legal, or technology credential.