Senior Director Records Management

In collaboration with the Chief Privacy Officer (CPO) helps to drive strategic vision, operating model, budget and planning activities, and outcomes for Privacy, including the development, implementation, maintenance and adherence to the Records and Information Management, transparency, and consent, and privacy incident response r policies and procedures. Leads the privacy teams accountable for records and information management and privacy incident response Regarded as a technical expert and trusted, strategic advisor to the CPO, leaders, and employees within and outside the department or function. As a member of the Privacy leadership team, accountable for furthering the Privacy Department’s Mission of ensuring regulatory compliance and fostering consumer trust while providing foundational capabilities for unlocking the value of data by translating privacy requirements to the business and positioning privacy as a competitive advantage that drives business growth and consumer trust. 

What You'll Do:

• As a subject-matter expert, consults on enterprise initiatives including new products and processes, proactively identifying risks and requirements to ensure compliance with data protection, privacy laws and regulations and enterprise expectations provide privacy minded solutions to the business.
• Leads a team of privacy professionals accountable for establishing and operationalizing the records and information management program and the privacy incident response program to ensure retention and secure deletion requirements are completed and timely notification and reporting of privacy incidents occurs when needed.
• Responsible for a full range of manager responsibilities including communication, coaching, mentoring and staff development, performance management, salary administration, and staffing decisions. Participant in functional management to ensure optimum effectiveness and quality by managing adherence to strategies, goals, budgets, operating policies, and procedures as an NM frontline manager. Alignment of roles and responsibilities in decision making. Accountable for translating the departmental strategy to information risk management operational objectives including both systems and processes. Drives for results through others to include:
  • Integrating and designing measurement systems, targets, and specific initiatives in support of the various strategies
  • Directing teams and individuals to ensure business outcomes are achieved
  • Identifying and cultivating relationships with key stakeholders representing a broad range of functions and levels in order to ensure alignment with departmental and enterprise business strategies
• Accountable for an effective and efficient business unit designed and maintained to support the business outcomes. Responsible for the integration of:
  • Organization/department design and structure
  • Workforce management (forecasting, obtaining, developing, and assigning the right resources)
  • Effective and efficient internal workflow and processes
  • Information and knowledge flows throughout the business unit and out to the organization through both formal and informal exchanges
• Accountable for providing leadership, strategy, and direction on privacy risk
• Accountable for providing technology-related requirements to teams implementing privacy controls, including privacy and RIM-related platforms and technologies.
• Maintains a comprehensive understanding of industry activities and emerging trends to effectively provide leadership, strategy and direction on risks related to records and information management, privacy notice requirements, consent/authorization requirements, and incident response.
• Partners with Law to draft transparent, legally compliance privacy notices, authorizations, and consents.
• Partners with the Legal Division, IT Risk and Compliance, Data Governance and Government Relations and other partners to embed records and information management and privacy incident response requirements and controls into projects, products, and services
• Understands and integrates into privacy impact assessment processes.
• Works to ensure the privacy program is embedded into every aspect of Northwestern Mutual’s business, enabling the Company to navigate a dynamic future in privacy that allows for ethical uses of data in ways that foster consumer trust.
• Collaborates with the CPO and Privacy Team to ensure the development, implementation, and oversight of adherence to the company’s policies and procedures that ensure compliance with federal and state privacy laws and regulations, the Privacy Program, and the Company’s Data Ethics Principles. 
• Leads enterprise projects, programs, or processes with significant business impact, develop tactical plans, and completes complex assignments. 
• Collaborates with the CPO, leaders, and stakeholders to develop strategic plans for the collection, use, sharing, and disposal of information in a manner that maximizes its value while complying with applicable data protection and privacy laws and regulations.
• Collaborates with Data Engineering to help shape a roadmap that accelerates leveraging data to drive NM’s business objectives while maintaining compliance with privacy laws and regulations and meeting consumer expectations.
• Accountable for monitoring the performance of the records and information management policies and procedures and privacy incident response policies and procedures on a continuing basis, taking appropriate steps to ensure continued improvement in their effectiveness and compliance with applicable laws and regulations. 
• Accountable for leading strategic planning, roadmap development, and operational planning.

What You'll Bring to the Role:

• Law Degree preferred.
• Bachelor’s and/or Master’s degree with an emphasis in Risk Management, Insurance, Finance, Computer Science, Computer Engineering, Software Engineering, MIS, or related field; or related work experience beyond the minimum required.
• Minimum of 5 years of experience in a privacy-related practice or field.
• CIPP/US required and CIPT or CIPM preferred.
• Experience in creating or operationalizing a records and information management program preferred.
• People management skills to include human relations and interpersonal skills necessary to manage a group of people.
• Strong analytical abilities especially in decision making and problem solving.
• Strong understanding of information risk, data privacy, and controls assurance.
• Strong understanding of risk management principles and techniques.
• Understanding of information risks and IT general controls.
• Experience in the financial services industry and in integrating risk management and governance solutions into technology systems or platforms.
• Existing perspective and approach to building strong, collaborative relationships with people who have diverse perspectives, roles, and responsibilities.
• Ability to navigate different levels of audiences and articulate ideas to both technical and non-technical audiences.
• Exhibits superior analytical, evaluative, and problem-solving abilities.
• Very comfortable with ambiguity, enjoys creating structure out of chaos, and enjoys learning and adapting to new areas and skills.
• Excellent organizational skills, ability to manage multiple projects at once, consistent follow-through.
• Excellent communication, analytical, organization, advocacy, and negotiation skills.

Skills You Will Have:

• Accountability: Holds self and their direct reports accountable for measurable, high-quality, timely, and cost-effective results, delivery, and execution. Determines objectives, sets priorities, delegates work to direct reports, and accepts responsibility for mistakes.
• Business Influence: Collaborates, communicates and influences direct reports, stakeholders, and other business functions based on understanding of the marketplace, organizational needs, and the client as a people manager.
• Policy & Procedure: Analyzes current policies and procedures, identifies gaps or areas for improvement, and develops and implements new policies and procedures to address those gaps. Ensures compliance with regulatory requirements and industry standards, as well as effectively communicates policies and procedures to employees and stakeholders. Understands the various components of a workflow, identifies bottlenecks, and implements improvements to increase productivity, reduce costs, and streamline operations.
• Risk Assessment & Identification: Leverages industry knowledge to determine and seek hazards that could potentially prevent the program, enterprise, or investment from achieving their objectives; designs systematic processes of identifying severity of hazards and evaluating the scale and impacts of any associated risk on the business.
• Strategic Vision & Planning: Develops, defines, and executes strategic vision for the team and business function they manage with an understanding of the enterprise’s goals as a people manager; defines business planning, strategy formulation, and management engine to support strategic vision.
• Talent Development & Planning: Develops direct reports’ skills based on organizational objectives, evaluates skill gaps, and manages succession planning to develop more capable direct reports, diverse, strong teams and better organizational performance in an equitable and inclusive manner.

#LI-Hybrid