Business Controls Senior Associate, Privacy GLBA/PCI

About the role

A first line of defense role providing specialized business controls support for privacy, information protection and regulatory risk, with focus on GLBA and PCI DSS.

What you will do

• Lead and coordinate GLBA risk assessments for applicable lines of business
• Support PCI Report on Compliance activities, including evidence collection and control validation
• Plan, coordinate and execute internal PCI assessments
• Help design controls, policies and sustainable processes to manage privacy and data protection risks
• Present risk insights to stakeholders to support informed decisions

What they look for

• Expertise in GLBA, PCI DSS and privacy risk and control requirements
• Experience assessing control design and effectiveness and identifying gaps
• Ability to work with Legal, Compliance, Enterprise Risk, Information Security, Technology and Audit
• Skill in monitoring regulatory changes and embedding them into business processes
• Strong communication and stakeholder presentation skills