Lead - Data Privacy

The Team Youll Join

You will join Envestnets Data Privacy Office, where we design, implement, and oversee robust privacy frameworks that enable secure, compliant, and responsible data practices across the organisation. The team collaborates closely with Legal, Information Security, Technology, and business stakeholders to embed privacy by design, manage risk, and ensure adherence to global regulatory requirements.

Guided by regulatory expertise, operational excellence, and a commitment to accountability and transparency, the Data Privacy Office drives initiatives across data governance, incident response, third-party risk, and privacy compliance. By strengthening trust, safeguarding personal data, and enabling responsible innovation, the team plays a critical role in supporting Envestnets long-term growth and reputation.

How Youll Contribute

As a Lead – Data Privacy within Envestnets Data Privacy Office, you will report to the Data Privacy leadership team and play a key role in driving privacy compliance, risk management, and operational excellence across the organization. You will lead the design and implementation of privacy frameworks, support complex regulatory and business requirements, and ensure the effective execution of privacy programmes across global operations.

You will contribute across the full privacy lifecycle—ranging from regulatory assessments and contract reviews to incident management and data subject rights fulfilment—while partnering closely with Legal, Information Security, Technology, and business stakeholders. Other responsibilities include:

• Develop and maintain privacy frameworks, policies, and procedures that address complex regulatory and business requirements, ensuring effective and scalable compliance.
• Assess and mitigate privacy risks through detailed reviews of data processing activities, contracts (MSA/DPA/SOW), and third-party engagements.
• Execute end-to-end privacy operations, including DSAR handling, incident response, and regulatory assessments, while driving consistency and standardization across processes.
• Champion quality and accuracy in privacy deliverables by implementing robust validation, review mechanisms, and continuous improvement practices.
• Monitor and optimize privacy workflows, ensuring adherence to SLAs, effective prioritization, and timely resolution of deliverables.
• Collaborate cross-functionally to embed privacy by design principles into products, systems, and business processes.
• Leverage technology and artificial intelligence tools to automate privacy operations, enhance risk detection, and improve decision-making efficiency.

What Youll Need to Bring

• Minimum 5+ years of experience in Data Privacy, Data Protection, or a related compliance function, with a strong track record of delivering high-quality, risk-informed outcomes.
• Bachelors or Masters degree in Law, Information Security, Data Privacy, Business, or a related field. Relevant certifications (e.g., CIPP/E, CIPM, CIPT) are preferred.
• Hands-on experience with privacy regulations (e.g., GDPR, CCPA/CPRA, DPDPA) and practical application across contract reviews, data processing assessments, and compliance programmes.
• Experience working in fast-paced, cross-functional environments, with the ability to manage multiple priorities and drive deliverables through collaboration with Legal, Technology, and business teams.
• Solid understanding of end-to-end privacy lifecycle, including DSAR processes, incident response, third-party risk management, and privacy-by-design implementation.

Nice-to-Haves

• Knowledge of Wealth Management, FinTech, or Financial Services, with an understanding of how data flows across client onboarding, servicing, and advisory platforms.
• Ability to adapt to evolving privacy technologies, regulatory landscapes, and automation tools, including AI-driven solutions for privacy operations.
• Strong analytical and problem-solving skills, with attention to detail in assessing complex data privacy risks and regulatory requirements.
• Excellent verbal and written communication skills, enabling effective collaboration with Legal, Technology, Information Security, and business stakeholders.
• Resourceful and proactive in identifying, assessing, and resolving privacy and compliance challenges in dynamic environments.