**Description**
**Location:** On site in Memphis, TN; Raleigh, NC; Jonesboro, AR;
**SUMMARY**
A Privacy Officer is responsible for developing, implementing, and overseeing an organization's privacy policies and procedures to ensure compliance with data privacy laws and regulations, by monitoring data collection, usage, and disclosure practices, investigating privacy incidents, and educating employees on data privacy best practices; essentially acting as the primary guardian of an organization's sensitive information and individual privacy rights. Must have transferrable skills that demonstrate the knowledge and ability to interpret and vet laws and regulations. Exhibits a sense of urgency, adheres to deadlines (both internal and those required by law) and meets department quality standards for accuracy and completeness of work.
**ESSENTIAL DUTIES AND RESPONSIBILITIES**
+ **Policy Development and Implementation:** Creates, updates, and maintains comprehensive privacy policies and procedures aligned with relevant privacy laws (e.g., GDPR, CCPA, HIPAA).
+ **Risk Assessments:** Performs initial and periodic privacy risk assessments and conducts related ongoing compliance monitoring activities in coordination with compliance and operational assessment functions.
+ **Compliance Monitoring:** Establishes and maintains a process for receiving, documenting, tracking, investigating and following up on all issues concerning the organization's privacy policies and procedures in coordination and collaboration with other similar functions and, when necessary, legal counsel. Conducts regular assessments to ensure adherence with data privacy regulations and that findings are addressed timely and appropriately.
+ **Data Subject Requests:** Manages and responds to individual data subject access requests, including data correction and deletion requests.
+ **Incident Response:** Monitors data breaches and privacy violations, including ensuring appropriate action when necessary. Regularly performs reviews of internal audit reports and regulatory reports of examination to identify privacy related issues and to determine if corrective action commensurate with the complexity of the identified issue and/or weakness is being taken
+ **Privacy Training:** Develops and delivers privacy awareness training programs to employees at all levels to educate them on proper data handling practices. Initiates, facilitates and promotes activities to foster information privacy awareness within the organization and related entities.
+ **Consent Management:** Establishes processes for obtaining informed consent from individuals regarding data collection and usage.
+ **Vendor Management:** Assesses third-party vendors' data privacy practices and ensuring compliance with the organization's privacy standards.
+ **Stakeholder Engagement:** Collaborates with legal, IT, and business teams to address privacy concerns and integrate privacy considerations into business operations.
+ **Governance:** Assists with quality control compliance reviews and assessments to identify key privacy risks and ensure adherence to privacy regulations. Assists with the preparation of committee reports as necessary
+ Performs other related duties as required
**SUPERVISORY RESPONSIBILITIES**
+ Assists with directing, coordinating, and evaluating designated units or certain personnel in accordance with the organization's policies and applicable laws. Responsibilities may include training employees; planning, assigning, and directing work; appraising performance; providing pay change recommendations; disciplining employees; addressing complaints and resolving problems.
**QUALIFICATIONS**
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Additionally, the qualifications listed below are representative of the knowledge, skills, and/or abilities required in this position:
+ Bachelor (4-year college) degree and 4-6 years of Financial Institution experience required. Risk management and/or compliance background required (2-4 years). Background in preparing for internal (Compliance Testing and/or Audit) and external (regulatory) examinations preferred.
+ Strong communication and interpersonal skills to interact with various stakeholders
+ Excellent research, written and oral communication skills. Ability to read and interpret legal documents and government regulations and work well under pressure.
+ Proficient knowledge of data privacy laws and regulations (e.g., GDPR, CCPA, HIPAA). Legal or compliance background preferred.
+ Must possess a high level of organizational skills, ability to multi-task and manage workflow, prioritize, adjust to changes, and follow-up.
+ Excellent analytical, problem solving, and critical thinking skills.
+ Ability to develop and implement effective privacy policies and procedures
**COMPUTER AND OFFICE EQUIPMENT SKILLS**
+ Proficient Microsoft Office suite
**CERTIFICATES, LICENSES, REGISTRATIONS (Ex: CPA, Series 6 or 7 license, etc)**
None required
**About Us**
First Horizon Corporation is a leading regional financial services company, dedicated to helping our clients, communities and associates unlock their full potential with capital and counsel. Headquartered in Memphis, TN, the banking subsidiary First Horizon Bank operates in 12 states across the southern U.S. The Company and its subsidiaries offer commercial, private banking, consumer, small business, wealth and trust management, retail brokerage, capital markets, fixed income, and mortgage banking services. First Horizon has been recognized as one of the nation's best employers by Fortune and Forbes magazines and a Top 10 Most Reputable U.S. Bank. More information is available at ( .
**Benefit Highlights**
- Medical with wellness incentives, dental, and vision
- HSA with company match
- Maternity and parental leave
- Tuition reimbursement
- Mentor program
- 401(k) with 6% match
- More -- FirstHorizon.com/First-Horizon-National-Corporation/Careers/Our-Benefits
**Follow Us**
Facebook (
X formerly Twitter
LinkedIn (
Instagram
YouTube (
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.
For further information, please review the Know Your Rights ( notice from the Department of Labor.