Senior Privacy & AI Risk Analyst

About This Opportunity

As a Senior Privacy & AI Risk Analyst, you will be expected to spearhead privacy initiatives and coordinate cross-team collaboration, ensuring privacy processes are followed through start to finish. You will also support Orion's AI governance efforts from a privacy standpoint—performing privacy reviews of AI use cases and helping ensure personal information is handled responsibly as the organization adopts AI.

It is anticipated that an incumbent in this role will work as a Hybrid employee, with three (3) or more days each week required on-site at one of the listed office locations. Candidates should be located within a commutable distance to an office. Internal candidates currently aligned to an Orion office location may be given preference; however, internal candidates with varying work arrangements may be considered based on experience and business needs. Work location is subject to change based on business needs.

Responsibilities

• Oversight and direction of privacy planning and procedure development across Orion Advisor Solutions, including the management of privacy policies in coordination with Legal and InfoSec
• Identify potential areas of privacy vulnerability and risk, develop correction action plans for resolution of problematic issues, provide guidance of risk mitigation, and provide reporting to the Data Protection Officer
• Manage responses to Potential Privacy Incident, in consultation with the Risk Officer, Orion’s Legal Department, Information Security Team, and relevant business lines
• Implement the Privacy Incident Response Plan, as needed
• Manage the Data Subject Rights Request (DSSR) process, including reviewing, validating, and responding to requests and maintaining a repository of requests and responses
• Maintain an inventory of AI and automated decision-making systems that process personal information, and complete intake and initial privacy review for new and existing AI use cases
• Track emerging AI-privacy requirements (e.g., automated decision-making and profiling rules under CCPA/CPRA and the Colorado AI Act) and escalate potential impacts to the Privacy Program Manager and Legal
• Perform privacy reviews and impact assessments for AI and machine-learning use cases that involve personal information, evaluating data minimization, purpose limitation, transparency, and automated decision-making and profiling risks
• Support Orion's AI governance program from a privacy perspective, helping implement privacy policies, standards, and controls for the use of AI in coordination with the Privacy Program Manager, Legal, and Information Security
• Own and manage relationships with stakeholders directly and work effectively with people at all levels in an organization
• Understand core AI and machine-learning concepts and the associated data-privacy risks, such as the use of personal information in training and inference, profiling, and transparency

Requirements

Has knowledge of the investment advisor industry, operations, and regulatory landscape

Has knowledge of federal and state privacy laws, rules, and regulations applicable to investment advisory and fintech business lines

A history of developing new policies and procedures based on changes to regulations or business operations

Learns and adapts to new systems and processes with limited direct training

Ability to multi-task while maintaining careful attention to detail

Works effectively both individually and within a team environment

Works with a sense of urgency to meet deadlines and address competing priorities

Proficient skills with Microsoft Office software including Word, Excel, PowerPoint, and Outlook

Effective written, listening, and verbal communication skills

Effective problem solving and organizational skills

Qualifications

• Minimum of a Bachelor's degree
• Preferably has a privacy or AI governance certification (e.g., CIPP/US, CIPM, or AIGP)
• Minimum of 5+ years of experience in financial compliance, risk, privacy or anti-money laundering program
• Experience preforming privacy reviews of AI use cases, or supporting AI governance from a privacy perspective is a plus

Skills

• Client-Centric
• Compliance Programs
• Compliance Support
• Due Diligence
• Effective Communication
• Innovation
• Technical Proficiency
• Time Management
• Work Collaboratively

Benefits

The pay listed in this posting indicates the estimated pay at the time of this posting; however, may vary depending on geographic location, job-related knowledge, skills, and experience. In addition, Orion offers a competitive benefits package which includes health, dental, vision, and disability coverage on day one, 401(k) plan with employer match, paid parental leave, pet benefits including pawternity leave and pet insurance, student loan repayment and more.