Sr Data Governance and Privacy Manager

Current Employees of LendingClub: Please apply via your internal Workday Account

LendingClub Corporation (NYSE: LC) is the parent company of LendingClub Bank, National Association, Member FDIC. We are the leading digital marketplace bank in the U.S., having helped our nearly 5 million members secure over $90 billion in loans to refinance high-cost debt and achieve their financial goals. Members today have mobile-first access to a growing range of products and services designed to work seamlessly together to deliver value in new ways. Everyone deserves a better financial future, and our team is committed to making that a reality. Join the Club!

About The Role

We are looking for an experienced data and privacy risk professional who will be primarily responsible for developing and supporting the Bank’s data risk management program (2nd line of defense). This role requires deep expertise in data risk, data governance and data privacy domains to ensure compliance with regulatory requirements, internal controls, and industry standards.

The ideal candidate has strong background in risk management, regulatory frameworks (GLBA, CCPA/CPRA, GDPR etc.) and data governance principles. This role requires a mix of broad business and technical acumen, the ability to inspire and influence decisions, and a polished ability to communicate with key internal partners. You’ll partner with cross-functional teams, including legal, information security, compliance, operations, business and technology to identify, measure, and mitigate data risk across the organization.



What You'll Do


Data Risk And Governance

• Oversee and mature the Data Risk and Data Governance framework; including managing and maintaining comprehensive data governance policies, procedures and standards to ensure data quality, integrity and security.
• Conduct risk and gap assessments, to ensure compliance with data governance policies and industry regulations.
• Provide oversight with the data lifecyle management, including data classification, data retention and data disposal process.
• Perform effective challenge all significant data processes and initiatives prior to finalization
• Lead and drive effective issues management and remediation execution in alignment with the Bank’s Issue Management Standard
• Effectively challenges issues, risk control self-assessments, and controls to help maintain data risk levels within the risk appetite of the Bank
• Collaborate with key stakeholders across the organization to incorporate data governance and management principles into controls, business processes, platforms, tools across the Bank.
• Collaborate across all lines of defense on core concepts of data governance (e.g., data quality, metadata management, data definitions and data stewardship)
• Review data related incidents and operational loss events to understand root cause and help prevent reoccurrence
• Design, document. monitor and report on data governance metrics and insights to Governance Committees; leverage the output to influence change in existing processes
• Serve as the "go-to" person and trusted subject matter expert on data risk mitigation
  
  

Privacy Risk And Compliance

• Oversee compliance with privacy regulations (GLBA, CCPA/CPRA, GDPR etc.), ensuring data protection policies align with legal requirements
• Provide guidance and assist in the identification of compliance risks, implementation, and maintenance of organization information privacy processes and procedures in coordination with information security and legal counsel
• Perform initial and periodic privacy risk assessments and conduct related ongoing compliance monitoring activities
• Partner with enterprise risk, third party vendor management, technology and the business units to ensure the organization maintains appropriate privacy and confidentiality consent, authorization forms, and information notices and materials which are reflecting the current organization and legal requirements
• Participate in the development, implementation, and ongoing compliance monitoring of all third-party providers to ensure all privacy concerns, requirements, and responsibilities are addressed
• Work with counsel, information security, corporate technology and the business units to ensure tracking of access to protected confidential financial information, customer information sharing in accordance with privacy notice disclosures, investigation of compromise incidents, evaluation to determine incident notification requirements under applicable laws, drafting of any such required notice
• Maintain current knowledge of applicable federal and state privacy laws (and international laws like GDPR), industry best practices and monitor advancements in information privacy technologies to ensure organizational adaptation and compliance
• Interact with bank partners, investors, internal and external auditors or regulators during audits, examinations or due diligences related to privacy and customer information security compliance matters
  
  

About You

• 6 years of professional experience, including extensive experience in risk management (data governance/ security / privacy); data governance principles, practices and frameworks (e.g. DAMA, DGI etc.)
• Bachelor's degree or higher in a related field; or equivalent work experience
• You have experience in regulated industries; banking industry is a plus
• You have experience managing data across its lifecycle in both cloud and on prem environment.
• You have experience with data governance, privacy and protection tools (e.g., Atlan, BigID, Privacera, Data Bricks etc.)
• You have knowledge of data sharing and privacy regulations (e.g., GLBA, CPCA/CPRA etc.), data structures and controls (segregation, tokenization etc.)
• Desire and ability to quickly learn about the activities and specificities of our unique business model, advanced technology capabilities, and evolving regulatory environment
• Flexible and adaptable; able to work in ambiguous situations
• Resilient and tenacious with a propensity for action
• Acute business insight and understanding of organizational issues and challenges
• Ability to communicate in a clear and concise manner with all levels of an organization and convey complicated technology and security concepts to both technical and non-technical people
• Excellent project management skills, with the ability to manage multiple projects simultaneously and meet deadlines.
• Exceptional interpersonal skills, both written and verbal
• Professional certifications such as CISSP, CISM, CISA, CRISC, CDMP, DGSP, CIPP, CIPT or similar is a plus
  
  

Work Location

San Francisco

We are currently working a hybrid schedule and our teams are in-office Tuesdays, Wednesdays, and Thursdays.

Time Zone Requirements

Primarily PT

Travel Requirements

Monthly/quarterly/as needed travel to San Francisco/Boston/Lehi/New York.

If you need to travel for work, LendingClub will cover your travel related expenses.

Compensation

The target base salary range for this position is 156,000-180,000. The position is also eligible to receive a bonus (which is based on company performance, employee performance and eligible earnings), equity, and benefits. Our salary ranges, other compensation and benefits offered are determined by role, experience level and location.

We’re creating new financial services solutions for our members based on fairness, simplicity, and heart, and we treat our employees the same way. We offer a competitive benefits package that includes medical, dental and vision plans for employees and their families, 401(k) match, health and wellness programs, flexible time off policies for salaried employees, up to 16 weeks paid parental leave and more.

LendingClub is an equal opportunity employer and dedicated to diversity, equity, and inclusion in the workplace. We do not discriminate on the basis of race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), gender, gender identity, gender expression, sexual orientation, age, marital status, veteran status, disability status, political views or activity, or other applicable legally protected characteristics. We believe that a variety of perspectives will make our teams and business stronger as we work together to transform the traditional banking system.

We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application process. If you need assistance or an accommodation due to a disability, please contact us at interviewaccommodations@lendingclub.com.