At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions, enabling the communities we support to grow and succeed in the right ways, all more confidently and more often—that’s what we call the courage to thrive. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive. Try new things, learn new skills and discover what you excel at—all from Day One.

As a wholly owned subsidiary of U.S. Bank, Elavon is committed to building the platforms and ecosystems that help over 1.5 million customers around the world to achieve their financial goals—no matter what they need. From transaction processing to customer service, to driving innovation and launching new products, we’re building a range of tailored payment solutions powered by the latest technology. As part of our team, you can explore what motivates and energizes your career goals: partnering with our customers, our communities, and each other.

We actively uphold transparent and fair hiring practices that support individual opportunity, inclusive culture, and career mobility across all levels of our organisation.

We offer meaningful opportunities for growth, a culture of inclusion, and a strong commitment to transparency and integrity in everything we do.

Job Description

The role holder will report to the Head of Compliance and will play a key role in the delivery of the Bank’s overall EU Data Protection/Privacy strategy and risk management.

The role holder is expected to be a subject matter expert in EU Data Protection/Privacy laws and regulation, with demonstrable experience in practical application of international privacy laws and regulations in the financial services arena.

Key responsibilities include: providing privacy/data protection related advice and guidance on a variety of data privacy requirements including, but not limited to, general data processing, new business initiatives and commercial offerings, third country data transfers, maintaining a register of processing activities, assistance with the investigation and management of potential data breaches, conducting Data Protection Impact Assessments, research into emerging privacy laws and trends, developing and delivering training etc.

The position will interact with other key bank functions including Legal, Operational Risk, Information Security, Risk Management and Operations.

Due to the responsibilities associated with the role adjustments to internal reporting lines, in accordance with regulatory requirements, may be deemed appropriate.

Accountabilities:

Inform and advise the Bank and its employees on applicable Privacy laws, Regulations and Enforcement, monitoring and reporting on new developments and trends across Europe.
Monitor compliance with applicable data protection regulations and corporate policies.
Support completion of Data Protection Impact Assessments across new projects and business initiatives, as required.
Providing advice and guidance on day-to-day privacy/Data Protection queries.
Lead the investigation and management of potential breaches/instances of non- compliance, providing recommendations as a result of those recommendations.
Interact with the First Line of Defence regarding privacy and data protection issues.
Regularly review and refresh policies, procedures and guidelines.
Develop and maintain strong relationships with the network of privacy/data protection professionals across the Bank and its parent (US Bank).
Develop materials and tools that support education, training and awareness. Including design and implement privacy training or communications to business teams. Support the on-going development and delivery of multi-channel training programmes on Data Protection and internal data awareness initiatives.
Oversight of and responsibility for investigation and resolution of data protection issues and implementation of corrective actions plans.
Determine and manage regulatory privacy filings as necessary.
Provide practical guidance and advice to the business on a variety of Data Protection matters.
Work collaboratively with the Information Security, Legal and Risk departments to develop and drive implementation across the business of best practices, procedures, tools and checklists to support the implementation of Bank’s GDPR data protection programme.
Lead aspects of Bank’s data protection programme such as governance framework, metrics and reporting.
Manage team, partners and stakeholders across multiple sites and jurisdictions.
Support and enable the business to deliver business outcomes through provision of practical, solution orientated, sound guidance and advice on data protection and privacy matters.

Experience Required:

A relevant third level qualification (e.g. law, IT, cyber security etc.).
A specific Data Protection qualification/certification e.g. CIPP/E, CIPP/M.
7-10 years’ experience in [Financial Services] and in a compliance, legal, risk or internal control role preferred.
Demonstrable work experience and a proven track record of dealing with data protection and privacy issues.
Experience engaging with external parties on data protection issues (regulators, customers, industry associations, etc.)
Excellent organizational and project management skills with strong attention to detail.
Experience of owning group wide strategic projects from conception to delivery.
Previous management experience preferred.
Flexible approach and a strong team player.
Experience working collaboratively and effectively with cross-functional teams.
Ability to build and maintain relationships vital.
Systematic thinker – takes a well-ordered and proactive approach to analysing problems, organizing work and planning action / execution in a fast-paced environment.

This role has been identified as a Controlled Function (“CF”) under the Regulations.

Accordingly, the Company must be satisfied on reasonable grounds that the role holder complies at all times with the requirements of the Fitness and Probity Regime and the Conduct Standards (as applicable to the role).

Applicants agree to permit the Company (or its agents) to conduct such due diligence as it deems necessary to satisfy itself on reasonable grounds that you comply with the requirements of the Fitness and Probity Regime and the Conduct Standards (as applicable to the role) and that you will provide the Company with all information and/or documentation relating to your qualifications, experience, employment history, financial soundness and other interests that the Company requests for that purpose.

It is the individual responsibility of every employee to maintain a current awareness and understanding of and to fully comply with U.S. Bank’s “Code of Ethics”. Each employee is also expected to maintain an awareness of the laws, regulations, internal policies and procedures that are appropriate for his/her position.

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

Accessibility

We are committed to providing an inclusive and accessible recruitment experience. If you need adjustments at any stage of the application or hiring process, please contact your recruiter for guidance and support.

Total Rewards

U.S. Bank is committed to fair, equitable, and transparent compensation practices in line with local regulatory and legal requirements. Our total rewards approach is designed to attract, retain, and support top talent while ensuring equal pay for work of equal value.

We offer a market-competitive compensation package that includes:

Clearly defined salary ranges aligned with industry benchmarks and internal equity standards.
Performance-based incentives for eligible employees (as defined by relevant plan rules), awarded through transparent, objective criteria that recognize both individual and company performance.
Inclusive equitable benefits that are accessible to all employees and focused around our 3 main pillars of financial wellbeing, health & wellness).
Continuous development opportunities including training, education support, and career progression pathways based on inclusive and transparent criteria.
Employee recognition programs that celebrate achievements and milestones for all.

We regularly review our compensation and benefits to ensure they remain competitive, inclusive, and responsive to employee needs and market trends. Further details of the compensation package will be provided upon application.

We encourage candidates to explore the full value of our offer, including monetary and non-monetary benefits, at Employee benefits and development | U.S. Bank | Elavon.

Closing Date

Posting may be closed earlier due to high volume of applicants.

We aim to provide timely updates throughout the process and encourage early applications to ensure consideration.

Head of Data Protection Office - Europe

Benefits

Job Description