Sr Enterprise Data Privacy Analyst - 17450

Seneca Resources is seeking a Senior Privacy Risk & Governance Consultant to support the continued development and maturity of an enterprise privacy program within a highly regulated financial services environment.

This role is ideal for a senior privacy professional with 10+ years of experience designing, implementing, and operationalizing enterprise privacy programs, preferably within a Second Line of Defense (2LOD) organization. The consultant will help strengthen privacy governance, privacy risk management, regulatory compliance, third-party privacy oversight, Privacy Impact Assessments (PIAs), Privacy Risk Assessments (PRAs), and privacy considerations associated with Artificial Intelligence (AI) and advanced analytics.

The successful candidate will partner closely with Legal, Compliance, Security, Technology, Data Governance, Data Management, Procurement, and business stakeholders to translate regulatory and privacy requirements into practical governance processes, controls, risk assessments, and implementation artifacts.

This is a highly collaborative role for someone who can operate strategically while also being comfortable rolling up their sleeves to execute., Privacy Governance & Standards

• Develop, maintain, and enhance enterprise privacy governance documentation, policies, standards, procedures, and supporting artifacts.
• Align privacy requirements with Data Governance, Data Sharing, Records and Information Management (RIM), and AI Governance initiatives.
• Monitor and track regulatory, audit, risk, and compliance commitments impacting privacy.
• Translate regulatory expectations into practical privacy governance requirements.

Privacy Impact Assessment (PIA) Oversight

• Manage and coordinate the intake, review, tracking, and reporting of Privacy Impact Assessments (PIAs).
• Review PIA submissions for completeness, quality, and adherence to established privacy requirements.
• Identify privacy gaps, risks, and control deficiencies and escalate significant concerns for management review.
• Support continuous improvement of PIA and Privacy Risk Assessment processes.

Privacy Risk Management & Second Line Oversight

• Support Privacy Risk and Control Self-Assessments (RCSA) and privacy control oversight activities.
• Identify, assess, document, and monitor privacy risks, issues, and remediation activities.
• Develop and maintain privacy Key Risk Indicators (KRIs), metrics, dashboards, and management reporting.
• Provide effective challenge and independent oversight consistent with a Second Line of Defense operating model.
• Support audit, regulatory examination, and risk management responses related to privacy.

Third-Party Privacy Risk

• Support privacy risk reviews for third-party relationships, vendors, and external data usage.
• Partner with Procurement, Legal, Compliance, Information Security, Technology, and business stakeholders to evaluate privacy requirements.
• Document identified privacy risks, required controls, mitigation strategies, and remediation actions.
• Monitor third-party privacy issues and support appropriate escalation and reporting.

AI Privacy & Emerging Technology

• Evaluate privacy risks and regulatory considerations associated with AI, Generative AI, machine learning, and advanced analytics use cases.
• Apply Privacy-by-Design principles to AI governance and technology initiatives.
• Identify dependencies and risk intersections across Privacy, Data Sharing, Records Management, Data Governance, and AI Risk Management.
• Help establish practical privacy expectations for emerging technology initiatives.

Business & Stakeholder Engagement

• Provide privacy governance guidance and coordination support to business units.
• Facilitate discussions across Legal, Compliance, Security, Technology, Data Management, and business teams.
• Support privacy awareness, communications, training, and adoption initiatives.
• Consolidate enterprise-wide privacy risks, issues, assessments, and activities into actionable management reporting.
• Present privacy risks, trends, metrics, and recommendations to senior stakeholders.

• 10+ years of professional experience in privacy, privacy risk management, privacy governance, compliance, or a closely related discipline.
• Demonstrated experience designing, implementing, enhancing, or operationalizing enterprise privacy programs.
• Experience working within a highly regulated financial services, banking, insurance, or similar environment strongly preferred.
• Experience operating within a Second Line of Defense (2LOD) risk or governance function strongly preferred.
• Strong knowledge of privacy principles, privacy risk management, PII, sensitive data, and data protection practices.
• Hands-on experience with Privacy Impact Assessments (PIA) and/or Privacy Risk Assessments (PRA).
• Experience with RCSA, risk assessments, control evaluation, issue management, remediation tracking, and risk reporting.
• Understanding of Privacy-by-Design principles.
• Knowledge of data governance, data sharing, records management, and information lifecycle management.
• Experience supporting third-party privacy risk assessments and vendor privacy reviews.
• Exposure to AI governance, AI risk management, Generative AI, machine learning, or advanced analytics privacy considerations.
• Strong ability to interpret policies, standards, regulations, and regulatory requirements.
• Experience developing risk metrics, KRIs, dashboards, executive presentations, and management reporting.
• Strong analytical, process mapping, documentation, and problem-solving skills.
• Excellent stakeholder management, facilitation, written, and verbal communication skills.
• Ability to translate complex regulatory and privacy requirements into clear, practical governance expectations., * Experience in a financial institution or other highly regulated organization.
• Experience establishing or maturing a Second Line Privacy Risk Management program.
• Familiarity with enterprise Data Governance and AI Governance frameworks.
• Experience partnering with Legal, Compliance, Information Security, Data Management, and Technology organizations.
• Professional privacy, risk, compliance, or data governance certification is a plus., The ideal candidate will bring strong privacy expertise, a risk-oriented mindset, and the ability to influence stakeholders while delivering tangible governance and risk-management outcomes.

At Seneca Resources, we are more than just a staffing and consulting firm, we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 companies to government organizations, we provide opportunities that help professionals grow their careers while making an impact.

When you work with Seneca, you’re choosing a company that invests in your success, celebrates your achievements, and connects you to meaningful work with leading organizations nationwide. We take the time to understand your goals and match you with roles that align with your skills and career path.

Our consultants and contractors enjoy competitive pay, comprehensive health, dental, and vision coverage, 401(k) retirement plans, and the support of a dedicated team who will advocate for you every step of the way.

Seneca Resources is proud to be an Equal Opportunity Employer, committed to fostering a diverse and inclusive workplace where all qualified individuals are encouraged to apply.

Vienna