Senior Privacy & AI Governance Lead

Amalgamated Bank Of Ny; New York (NY); Hybrid; USD 160,000 - 185,000; Full time

Job summary

Amalgamated Bank seeks a Privacy Officer to oversee the enterprise privacy program, ensure regulatory compliance, and embed privacy-by-design across the organization. The role partners with Legal, IT, Information Security, Risk, and business units and reports to the Deputy General Counsel, without requiring a law degree.

The position manages privacy policy development, governance, training, and incident response, including collaboration with regulatory examinations and audits.

Qualifications

• Defined privacy program management across enterprise with policies, standards, procedures and controls.
• Experience addressing privacy laws (GLBA, state breach/privacy laws) and regulatory compliance.
• Familiarity with generative AI tools and privacy considerations for AI-enabled use cases.
• Ability to translate privacy requirements into business-friendly policies and vendor agreements.
• Capable of delivering privacy training and governance reporting to leadership.

Responsibilities

• Define and manage the bank’s enterprise privacy program with controls frameworks and roadmaps.
• Monitor compliance with privacy laws and regulatory expectations across the organization.
• Partner with Legal, IT, Risk, Information Security, and business units on privacy issues and AI governance.
• Coordinate privacy-related incident response, audits, and breach-notification activities.
• Develop privacy training and awareness programs for employees and third parties.
• Prepare privacy metrics and reporting for senior management and board.

Skills

Privacy program management

Regulatory compliance

AI governance

Policy development

Cross-functional collaboration

Education

CIPP/US

CIPM

Job description

Amalgamated Bank seeks a Privacy Officer to oversee the enterprise privacy program, ensure regulatory compliance, and embed privacy-by-design across the organization. The role partners with Legal, IT, Information Security, Risk, and business units and reports to the Deputy General Counsel, without requiring a law degree.

The position manages privacy policy development, governance, training, and incident response, including collaboration with regulatory examinations and audits.