Sr. Privacy Analyst (Hybrid)

As part of UMB’s Corporate Information Security and Privacy (CISP) team, the mission is to identify threats, vulnerabilities, and risks and to help protect the people, information, and services within the organization. CISP works closely with all lines of business.

As a Sr. Privacy Analyst, you will be responsible for performing essential activities associated with UMB's Privacy Program, as well as contributing to other programs within the Corporate Information Security and Privacy department.  Successful fulfillment of job responsibilities will be achieved through a combination of direct ownership of components of the Privacy Program, as well as through managing key business partners' priorities to ensure compliance objectives are met.  This is a subset of the overall responsibilities which involves other multiple initiatives as assigned by Corporate Risk leadership. 

This role is hybrid working Monday to Thursday on-site in our downtown Kansas City, MO location and remotely on Friday.

How you’ll spend your time:

• Provide essential support to UMB’s incident response program, including evaluating and advising on privacy ramifications of information security incidents, identifying root causes and contributing to corrective actions and process improvements.
• Design and/or implement controls and processes that align with the requirements of the Gramm-Leach-Bliley Act (“GLBA”), General Data Protection Regulation (“GDPR”), Healthcare Insurance Portability and Accountability Act (“HIPAA”), U.S. state privacy laws (such as the California Consumer Privacy Act or “CCPA”) and the NIST Privacy Framework.
• Maintain enhanced knowledge of the above privacy laws, regulations and frameworks, as well as laws relating to data breach notification.
• Regularly monitor, inventory, assess and suggest improvements to data privacy practices across all lines of business.
• Perform periodic risk assessments to evaluate existing controls and practices for design and performance effectiveness, including identification of areas throughout the organization that are in need of risk assessments.  
• Provide support to other adjacent programs, including records management and information security and privacy external communications.
• Proactively develop and maintain effective relationships with business partners across the organization.
• Lead special projects and other duties as assigned.
• Proactively develop and maintain effective relationships with business partners across Legal, Risk Management, Audit, IT, Operations, and Business Development.

We’re excited to talk with you if:

• You have a Bachelor’s degree from an accredited college or university OR equivalent work experience.
• You have at least 3 years of experience in Risk Management, Compliance, Audit, Information Technology, Project Management, or similar disciplines.
• You have the initiative to work towards a relevant certification (i.e. CIPP/US, CIPM, CIPT through the IAPP).
• You have intermediate knowledge of privacy and/or information security incident response.
• You have proven demonstrated experience in the field of data privacy including but not limited to knowledge of the privacy laws, regulations, and frameworks.
• You can independently execute complex tasks with limited manager oversight and guidance.
• You have successfully made independent, risk-based decisions to escalate to management as needed.

Bonus Points If:

• You have prior work experience in third party/vendor management, bank operations, accounting, procurement, legal, internal audit risk or risk related roles.
• You have general understanding of banking and financial services processes, and the related risks to securing and managing data. 

Applicants must have legal authority to work in the United States.  Work Visa sponsorship not available for this position.

Compensation Range:

The posted compensation range on this listing represents UMB’s standard for this role, but the actual compensation may vary by geographic location, experience level, and other job-related factors. In addition, this range does not encompass the full earning potential for this role. Please see the description of benefits included with this job posting for additional information

UMB offers competitive and varied benefits to eligible associates, such as Paid Time Off; a 401(k) matching program; annual incentive pay; paid holidays; a comprehensive company sponsored benefit plan including medical, dental, vision, and other insurance coverage; health savings, flexible spending, and dependent care accounts; adoption assistance; an employee assistance program; fitness reimbursement; tuition reimbursement; an associate wellbeing program; an associate emergency fund; and various associate banking benefits. Benefit offerings and eligibility requirements vary.

Are you ready to be part of something more?
You're more than a means to an end—a way to help us meet the bottom line. UMB isn't comprised of workers, but of people who care about their work, one another, and their community. Expect more than the status quo. At UMB, you can expect more heart. You'll be valued for exactly who you are and encouraged to support causes you care about. Expect more trust. We want you to do the right thing, no matter what. And, expect more opportunities. UMBers are known for having multiple careers here and having their voices heard.

UMB and its affiliates are committed to inclusion and diversity and provide employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including gender, pregnancy, sexual orientation, and gender identity), national origin, age, disability, military service, veteran status, genetic information, or any other status protected by applicable federal, state, or local law. If you need accommodation for any part of the employment process because of a disability, please send an e-mail to [email protected] to let us know the nature of your request.

If you are a California resident, please visit our Privacy Notice for California Job Candidates to understand how we collect and use your personal information when you apply for employment with UMB.