Privacy Advisory - Global Privacy Office

OUR IMPACT

Our division prevents, detects and mitigates compliance, regulatory and reputational risk across the firm and helps to strengthen the firm’s culture of compliance. Compliance accomplishes these through the firm’s enterprise-wide compliance risk management program. As an independent control function and part of the firm’s second line of defense, Compliance assesses the firm’s compliance, regulatory and reputational risk; monitors for compliance with new or amended laws, rules and regulations; designs and implements controls, policies, procedures and training; conducts independent testing; investigates, surveils and monitors for compliance risks and breaches; and leads the firm’s responses to regulatory examinations, audits and inquiries. You'll be part of a team with members from a wide range of academic and professional backgrounds, such as law, accounting, sales, and trading. We look for those who possess sound judgment, curiosity, and are able to adapt to a changing regulatory landscape.

YOUR IMPACT

This is an exciting opportunity to join the Privacy Advisory team, supporting Ireland and European operations and be a member of Goldman Sachs’ Global Privacy Office (GPO). The successful candidate will work from Goldman Sachs’ Birmingham office and provide expert advice on complex privacy matters to senior stakeholders across the firm. The candidate will also play a key role in collaborating with colleagues to further build out the firm’s privacy program to address the evolving regulatory landscape, enhance divisional collaboration and increase cross-functional engagement.

Responsibilities

We are seeking a Privacy Advisory vice president with excellent analytical, communication and co-ordination skills to join the Global Privacy Office.  This role will require you to develop a detailed knowledge of multiple areas within the firm and will include:

• Leading the identification and strategic assessment of privacy risks and opportunities across the firms’ business lines, products and initiatives in Ireland and the wider European marketI
• Identifying and executing opportunities to efficiently scale the firm’s global privacy program within European jurisdictions
• Providing expert privacy advisory guidance to business, engineers, operations, compliance and other stakeholders to enable the delivery and development of privacy compliant business initiatives, including the use of Artificial Intelligence (AI) and AI systems
• Overseeing privacy risk assessment processes (including Data Protection Impact Assessments and AI-related impact assessments) and other operational aspects of the firm’s privacy compliance program
• Reviewing and assessing products, features and business activities, including those that employ AI and AI-related technologies, against Irish and EU privacy requirements and standards
• Counselling cross-functional project teams on the privacy implications of new initiatives and regulatory change programs 
• Monitoring and reporting to senior management on the status of the privacy program
• Partnering with Legal, Compliance, Engineering, Risk and Business teams to research and assess the impact of new privacy and data protection laws or regulations (such as guidelines from the Irish Data Protection Commission and the European Data Protection Board), and managing the work to deliver required changes
• Partnering with Engineering teams to identify and design new tools, or improve existing tools, that support the firm’s privacy compliance program
• Promoting the development and implementation of privacy program governance frameworks with key stakeholders in Operations, Compliance, Technology, Legal and Risk
• Promoting a culture of privacy risk accountability across the first line of defense through engagement, education and influence
• Shaping and advising on privacy program policies and procedures, ensuring they reflect Irish regulatory expectations and business realities
• Contributing to other activities within the Global Privacy Office where necessary

Basic Qualifications

• Bachelor’s degree or international equivalent; legal degree is helpful
• CIPP/E certification is highly preferred
• At least 7 years of work experience, with at least 5 of those working in the Privacy or Data Protection domain
• Experience with reviewing, advising and/or implementing programs to address privacy laws on a local and global level (e.g., EU GDPR, Irish Data Protection Act 2018, ePrivacy Regulations, EU AI Act, etc…)
• Financial services experience is a plus, particularly within an Irish or EU-regulated entity

Required Skills

• Highly motivated with the ability to work autonomously as well as in a team and collaboration-oriented environment
• Highly organized, attention to detail and excellent follow through skills 
• Strong analytical and problem-solving skills; risk-based prioritization
• Excellent verbal and written communication skills to effectively articulate complex regulatory requirements to stakeholders and dependent teams at all levels of the firm
• Able to coordinate activities with multiple interdependencies and to escalate items that are unresolved or at risk
• Comfortable working with incomplete information, to ask focused questions and rapidly gain an in-depth understanding of the current processes and compare and relate to similar situations

• Detailed problem tracking, resolutions and completion of all actions and issues by their deadlines