Compliance Consultant - Data Governance, Security & Privacy Compliance

Compliance Consultant

Data Governance, Security & Privacy Compliance Team

Full-Time

Boston, MA or Springfield, MA

The Opportunity

As a Compliance Consultant on the Data Governance, Security and Privacy Compliance team, you will develop and implement broad, integrated compliance strategies relating to data governance, cybersecurity, and privacy compliance. You’ll act as a liaison to other Compliance & Ethics Department teams, control functions and business partners regarding data governance, security, and privacy compliance activities, and will be part of a team of compliance professionals responsible for managing the compliance programs associated with data governance, cybersecurity, and privacy.

The Team

The Data Governance, Security and Privacy Compliance team is part of the Financial Crimes & Fraud Prevention Compliance team, which sits within the Compliance & Ethics Department and is responsible for our fraud prevention; anti-money laundering and economic sanctions; anti-corruption; data governance, security and privacy; and elder financial exploitation compliance strategies and programs.

Working as an integrated team of subject matter experts, Financial Crimes & Fraud Prevention Compliance aligns various compliance efforts to manage financial crimes and fraud compliance risk. The team is organized according to the risks it monitors (anti-money laundering and economic sanctions; data governance, security and privacy; anti-corruption; elder financial exploitation and fraud), but integrating these various functions within the same team enables the Financial Crimes & Fraud Prevention Compliance team to effectively manage financial crime, fraud and privacy compliance risk across the organization. This is accomplished by greater and consistent coordination and communications with business lines and other control functions, development of an overall financial crimes and fraud risk assessment and risk appetite, data sharing and analytics across financial crimes, fraud and data privacy/security prevention activities and efficient workflow and case management activities.

The long-term vision of the Financial Crimes & Fraud Prevention Compliance team is to develop a program that owns a portfolio of financial crimes, fraud and data privacy/security-related compliance risks managed across common strategies, with shared resources, greater coordination within the team, and greater coordination, communication and consultation with our fellow Compliance & Ethics Department colleagues, control functions and business partners.

The Impact

As a Compliance Consultant on the Data Governance, Security and Privacy Compliance team you are expected to implement broad, integrated compliance strategies relating to data governance, cybersecurity, and privacy compliance. You will work with data security, data governance and privacy business partners to perform compliance risk assessments, compliance testing, and monitoring of various data security, data governance and privacy processes. You will participate as the compliance representative in responding to cyber security and privacy incidents and will proactively identify data security and privacy compliance risks and areas for improvement.  You will act as a liaison to other Compliance & Ethics Department teams, control functions and business partners regarding data governance, security, and privacy compliance activities.

Specific responsibilities include collaborating with team members, as well as business and control function partners, to develop and execute the strategy to enhance the effectiveness of the Compliance & Ethics Department’s Data Governance, Security and Privacy Compliance program, including:

• Investigating and responding to potential privacy incidents involving personally identifiable information and other confidential Company data.

• Analyze root cause(s) of privacy incidents to recommend corrective actions and reduce risk of recurrence

• Assessing the current data governance framework and associated data security and privacy compliance risks

• Recommending enhancements to mitigate identified risks

• Assessing relevant policies, procedures and controls relating to data governance, cyber security and privacy compliance

• Acting as a compliance representative responding to privacy and cyber security incidents, especially those implicating privacy laws

• Developing and executing on privacy, cyber security, and data governance testing and monitoring strategies,

• Acting as liaison to other Compliance & Ethics Department functions, control functions and business partners on data governance, data security, and privacy activities,

• Identifying education opportunities and enhancements related to data governance, security, and privacy compliance, and

• Developing appropriate metrics and reporting on the effectiveness of the data governance, security and privacy compliance program.

The Minimum Qualifications

• Bachelor’s degree or equivalent related experience

• 7+ years Data Governance, Security and/or Privacy Compliance experience

• Due to the nature of this position, you must be able to pass a non-registered fingerprint background check to qualify as a fingerprinted person under FINRA.

The Ideal Qualifications

• Comfort with using corporate technology (i.e. database usage and structure, data flows & privacy and cyber security tools)

• Experience with Microsoft Office Suite

• Understanding of implications of technology risks and mitigations

• Exhibits highest ethical standards & strong work ethic

• Strong communication skills, with the ability to generate concise and thorough documentation and report

• Willingness to learn and ability to adapt to change driven by regulatory, industry, and business developments

• Proficient with Microsoft Office programs and at least some exposure to data base and data visualization software

• Ability to collaborate effectively with peers, as well as clients at all levels/areas of the organization & meet deadlines

• Strong analytical and critical thinking skills, with the ability to effectively identify, communicate, and address potential issues

What to Expect as Part of MassMutual and the Team

• Regular meetings with the Compliance Consultant on the Data Governance, Security and Privacy Compliance team

• Focused one-on-one meetings with your manager

• Networking opportunities including access to Asian, Hispanic/Latinx, African American, women, LGBTQ, Veteran and disability-focused Business Resource Groups

• Access to learning content on Degreed and other informational platforms

• Your ethics and integrity will be valued by a company with a strong and stable ethical business with industry leading pay and benefits

#LI-FT1