Workforce Data Privacy Lead in City of Westminster

Bring your expertise to JPMorgan Chase. As part of the HR and Employee Experience (HR/EX) Chief Data Office, you will play a crucial role in shaping the future of Privacy within our HR functions. This position offers the opportunity to collaborate with cross-functional teams to ensure compliance with firmwide policies and local laws. Your expertise will be instrumental in managing data-related risks and enhancing our data use capabilities. As a Vice President in HR Data Privacy, you will be pivotal in executing key transformation initiatives across Human Resources. Your role will focus on implementing data-centered projects while ensuring data protection and compliance, fostering a culture of data security within our organization. Our culture in the HR/EX Chief Data Office encourages innovation, challenging the status quo, and striving for best-in-class data management practices. As a leader in this space, you will ensure HR data assets are managed with rigor and precision, enabling trusted data for strategic decision-making while maintaining compliance with regulatory and firm policies.

Job Responsibilities

• Data Subject Access Requests (DSAR) Oversight: Own end-to-end oversight of HR DSAR intake, triage, coordination, response production, and closure, ensuring processing is executed in accordance with UK GDPR & EU GDPR (and applicable local privacy laws), with clear governance, documentation, and risk-based escalation.
• HR Data Privacy Incident & Case Management: Execute and manage HR data privacy incidents and global case governance processes, ensuring prompt resolution, risk-based escalation, and adherence to applicable privacy regulations and strategic objectives.
• Data Protection Impact Assessments: Conduct comprehensive data protection impact assessments (DPIAs) to identify and mitigate privacy risks. Perform legitimate Interest Assessments (LIAs) to ensure compliant processing of workforce data.
• Records of Processing Activities: Maintain HR's Records of Processing Activities (ROPA) inventory and related documentation to ensure accuracy, currency, transparency, and accountability across HR data processing.
• Cross-Functional Guardrails & Standards Development: Partner with Legal, Compliance, Firmwide Privacy, Cyber, and Technology Controls to establish and enforce robust guardrails for HR data use and protection, embedding data privacy standards, protocols into a risk-based decision-making framework.
• Executive Stakeholder Management: Engage senior HR and Risk & Compliance leadership in EMEA Risk and Controls forums, acting as a senior subject matter expert on data privacy, incident management, and new/emerging regulations impacting workforce data protection.

10+ years of experience in the financial services industry, specializing in data privacy. Proven history of leading privacy operations relating to workforce data, with strong knowledge of UK GDPR and EU GDPR compliance requirements. Top-tier written and verbal communication skills, with an ability to synthesize complex privacy topics into actionable decisions. Embodies a privacy-first mindset with a background in risk and controls. Meticulous attention to detail and ability to work independently in executing tasks under aggressive timelines while managing changes in planning/scope. CIPP or CIPM Certifications are preferred.