Workforce Data Privacy Lead

Bring your expertise to JPMorgan Chase. As part of the HR and Employee Experience (HR/EX) Chief Data Office, you will play a crucial role in shaping the future of Privacy within our HR functions. This position offers the opportunity to collaborate with cross-functional teams to ensure compliance with firmwide policies and local laws. Your expertise will be instrumental in managing data-related risks and enhancing our data use capabilities.

As a Vice President in HR Data Privacy, you will be pivotal in executing key transformation initiatives across Human Resources. Your role will focus on implementing data-centered projects while ensuring data protection and compliance, fostering a culture of data security within our organization. Our culture in the HR/EX Chief Data Office encourages innovation, challenging the status quo, and striving for best-in-class data management practices. As a leader in this space, you will ensure HR data assets are managed with rigor and precision, enabling trusted data for strategic decision-making while maintaining compliance with regulatory and firm policies.

Job Responsibilities

• Data Subject Access Requests (DSAR) Oversight: Own end-to-end oversight of HR DSAR intake, triage, coordination, response production, and closure, ensuring processing is executed in accordance with UK GDPR & EU GDPR (and applicable local privacy laws), with clear governance, documentation, and risk-based escalation.
• HR Data Privacy Incident & Case Management: Execute and manage HR data privacy incidents and global case governance processes, ensuring prompt resolution, risk-based escalation, and adherence to applicable privacy regulations and strategic objectives.
• Data Protection Impact Assessments: Conduct comprehensive data protection impact assessments (DPIAs) to identify and mitigate privacy risks. Perform legitimate Interest Assessments (LIAs) to ensure compliant processing of workforce data.
• Records of Processing Activities: Maintain HR’s Records of Processing Activities (ROPA) inventory and related documentation to ensure accuracy, currency, transparency, and accountability across HR data processing.
• Cross-Functional Guardrails & Standards Development: Partner with Legal, Compliance, Firmwide Privacy, Cyber, and Technology Controls to establish and enforce robust guardrails for HR data use and protection, embedding data privacy standards, protocols into a risk-based decision-making framework.
• Executive Stakeholder Management: Engage senior HR and Risk & Compliance leadership in EMEA Risk and Controls forums, acting as a senior subject matter expert on data privacy, incident management, and new/emerging regulations impacting workforce data protection.

Required Qualifications, Capabilities, and Skills

• 10+ years of experience in the financial services industry, specializing in data privacy.
• Proven history of leading privacy operations relating to workforce data, with strong knowledge of UK GDPR and EU GDPR compliance requirements.
• Top-tier written and verbal communication skills, with an ability to synthesize complex privacy topics into actionable decisions.
• Embodies a privacy-first mindset with a background in risk and controls.
• Meticulous attention to detail and ability to work independently in executing tasks under aggressive timelines while managing changes in planning/scope.
• CIPP or CIPM Certifications are preferred.