Data Privacy Director

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The General Counsel's Office is a valued, trusted and responsive partner within DTCC. The team promotes and protects the best interests of the DTCC family of companies by creating and facilitating solutions and providing guidance on legal and regulatory matters.

The Impact you will have in this role:

We are seeking a highly experience Director, Data Protection and Privacy to support the Chief Privacy Officer in overseeing the firm’s global privacy governance program. In this position, you will serve as an advisor to business stakeholders, offering guidance on privacy risks, regulatory requirements, and effective mitigation strategies. You will collaborate with Legal, Technology, Cybersecurity, Procurement, and other key business leaders to drive compliance with DTCC’s privacy policies, standards, and operating procedures. This role also provides the opportunity to shape the strategic direction of core privacy initiatives, including enterprise data governance, artificial intelligence governance, cloud‑based technologies, and marketing technologies practices, while supporting compliance, risk mitigation, and innovation. Experience in leading data incident response, investigations, and addressing regulatory reporting obligations is essential for success in this position.

Your Primary Responsibilities: 

• Maintain current understanding of applicable global privacy laws and regulatory requirements, including impacts of AI regulations.  Draft and/or maintain privacy policies, standards, procedures, or guidelines as needed and collaborate across the business to support compliance to the firm’s requirements (e.g., GDPR/UK GDPR, US state laws, APAC, etc.).  Provide oversight and escalation support for complex privacy matters and enterprise initiatives. 

• Increase awareness of and drive accountability for privacy program components operated by first line of defense, collaborating across both first and second lines as needed.

• Provide guidance on ePrivacy compliance to Marketing and advise on management of cookies, tracking technologies, consent management, and direct marketing requirements across relevant jurisdictions. 

• Assist with review of vendor agreements, Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), or other supplementary measures or documentation escalated from Procurement and Legal to align contract positions to DTCC’s requirements.

• Champion Privacy by Design by embedding privacy requirements into the systems development process.  Lead and oversee DPIAs and other privacy risk assessments for initiatives involving new technologies, vendor solutions, new or enhancements to products or services, etc.

• Assist, lead, and oversee operational processes such as Record of Processing Activities, Data Subject Access Requests, etc. refining procedures, service levels, reporting, and controls as needed to ensure consistent execution and regulatory compliance.

• Lead data breach investigations, impacting data privacy and client confidentiality.  Address regulatory reporting obligations and perform trend analysis of reported matters.

• Support other daily program elements as needed such as training and awareness, review of DLP policies, management reporting, GRC activities, etc.

**NOTE: The Primary Responsibilities of this role are not limited to the details above.**

• Relevant experience to include security/IT audit, information security, risk management, etc. (E.g., CISM, CISSP, CISA (as applicable))

• Experience with data governance, AI governance, or technology risk management strongly preferred.

• Ability to drive alignment cross-functionally by establishing credibility and influencing peers and leaders at all levels to enable decisions and drive execution, balancing operational realities. 

• Support a strong culture of accountability and collaboration across privacy, legal, compliance, technology, business teams, risk and lines of defense. 

• Ability to operate independently with attention to detail to manage multiple priorities and drive decisions in a fast-paced organization.

• Ability to demonstrate a balanced risk-based mindset that protects the firm and enables the business.

• Experience providing privacy risk and governance guidance across cloud technologies, data platforms, AI‑enabled solutions, and marketing technologies.

• Familiarity with data flows, system architecture concepts, and privacy controls (minimization, encryption, access controls, logging, retention).
   

DTCC proudly supports Flexible Work Arrangements favoring openness and gives people freedom to do their jobs well, by encouraging diverse opinions and emphasizing teamwork.  When you join our team, you’ll have an opportunity to make meaningful contributions at a company that is recognized as a thought leader in both the financial services and technology industries. A DTCC career is more than a good way to earn a living. It’s the chance to make a difference at a company that’s truly one of a kind.

Learn more about Clearance and Settlement by clicking here.