Head of Data Privacy & Protection

About the role

Envision Employment Solutions is recruiting a Head of Data Privacy & Protection for a leading digital bank partner. There is no existing privacy programme or policy manual to inherit: the role designs the framework, classification standards and the handling of individual data requests, and acts as the bank's Data Protection Officer (DPO) and subject matter expert on privacy.

Key responsibilities

• Design and implement a complete Data Privacy Framework, privacy policies and data classification standards from scratch
• Lead compliance initiatives mapped to laws, regulations and standards, coordinate with regulators and serve as DPO
• Run the Privacy Impact Assessment (PIA) lifecycle and embed privacy-by-design and privacy-by-default into agile product development, analytics pipelines and new features
• Build workflows for Data Subject Access Requests, consent management, opt-outs and data rectification
• Implement and integrate DLP, database activity monitoring, encryption key management and data masking tools for sensitive financial data in cloud and hybrid environments
• Scale enterprise-wide data discovery, tagging and automated classification of customer PII and banking assets
• Oversee cross-border data transfers, cloud data residency and contractual data processing agreements with legal and infosec teams
• Work with the CISO and Incident Response teams on privacy-related security incidents, breach notifications and data leakage remediation

Required profile

• 10+ years of cumulative professional experience, including 4 to 5 years in a data privacy, data protection or regulatory compliance leadership role in banking, financial services or privacy-mature tech
• Proactive, builder mindset and strong stakeholder management, able to turn complex regulatory requirements into actionable guidance for engineering, product and executive teams

Required skills

• Deep familiarity with CBE regulations, GDPR and other cross-border privacy frameworks
• Data classification tools such as Microsoft Purview, data masking and encryption standards
• Credentials such as CDPO, CISM or CISA are strongly preferred