T. Rowe Price · 21 hours ago
Senior Risk Analyst, Privacy & Third-Party Risk
Baltimore, MD
Full-time
Hybrid
Mid, Senior Level
$87K/yr - $148K/yr
5+ years expT. Rowe Price is a premier global asset management organization with over 85 years of experience, dedicated to helping clients thrive. The Senior Risk Analyst – Privacy & Third Party Risk will provide independent risk oversight and assurance, manage complex risk assessments, and deliver insights to senior stakeholders while collaborating with various teams to enhance privacy and third-party risk capabilities.
Business DevelopmentFinanceFinancial ExchangesFinancial Services
Responsibilities
Independently provide 2LoD oversight of privacy risks arising from first-line business activities and serve as a subject matter resource on privacy risk matters
Lead review and challenge of Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), and privacy risk assessments
Evaluate the design and operating effectiveness of privacy controls and recommend enhancements aligned with regulatory expectations and risk appetite
Independently review privacy incidents, including root cause analyses and remediation plans
Provide technical expertise and support the implementation of privacy and data protection processes, controls, and procedures based on enterprise-wide guidance issued by the Global Privacy Office
Support the process of Privacy and Security by Design reviews, in particular, where they relate to the development and deployment of new technologies. This includes reviewing technical implementation details and design documentation for new systems and features, and providing guidance on improving privacy features in those systems
Collaborate with technology and security teams to embed privacy controls into the architecture of products and services, including providing advice and best practices to protect and mitigate privacy risks
Identify opportunities to enhance the Global Privacy Office’s technical capabilities, develop, test and work with technology teams to deploy such capabilities
Support the maintenance of the firm’s required privacy compliance documentation (e.g., Records of Processing Activities, Transfer Impact Assessments, procedures, guides, training, Share Point sites)
Support the execution of the privacy compliance monitoring program
Perform quality assurance and effective challenge of third-party risk outputs produced by external service providers and first-line stakeholders
Monitor adherence to SLAs, KPIs, and contractual obligations of outsourced TPRM providers and escalate deficiencies as appropriate
Identify systemic control gaps, concentration risk, and emerging third-party risk trends across the vendor population
Support third party cyber and information security risk review activities
Contribute to the ongoing development of fourth-party risk governance and oversight practices
Identify opportunities to enhance TRPM’s technical capabilities, develop, test and work with technology teams to deploy such capabilities
Support the maintenance of the firm’s required TPRM compliance documentation (e.g., Policy, Supplier Management Standards, questionnaire templates, frameworks, training, Share Point sites)
Independently develop and deliver executive-level risk reporting, dashboards, and management information
Assist with monitoring and reporting emerging AI and technology risks across privacy and third party risk, contributing to oversight of controls, assessments, and reporting
Leverage AI-enabled tools and advanced analytics to identify trends, emerging risks, and control weaknesses
Lead preparation for regulatory examinations, internal audits, and management assurance activities related to privacy and third-party risk oversight
Maintain accurate, complete documentation in GRC, privacy, and TPRM systems and ensure audit-ready artifacts
Qualification
Required
Bachelor's degree in Risk Management, Information Systems, Finance, Business, Law, or a related field
5+ years of experience in second-line risk management, privacy risk, or third-party risk oversight, preferably within financial services or asset management (or other industry subject to equivalent regulatory scrutiny)
Demonstrated ability to operate independently with minimal guidance in a 2LoD environment
In-depth knowledge of global privacy regulations and outsourced TPRM operating models
Required Certifications (at least one):
Certified Information Privacy Professional (CIPP/US, CIPP/E)
Certified Information Systems Auditor (CISA)
Certified in Risk and Information Systems Control (CRISC)
Certified Third Party Risk Professional (CTPP)
Preferred
Experience leading or independently managing 2LoD privacy or TPRM oversight activities
Asset management or broader financial services experience
Additional certifications:
CIPM or CIPT
ISO 27001 Lead Implementer or Auditor
Familiarity with SEC, FINRA, and global regulatory expectations
Advanced experience with GRC, privacy, and TPRM platforms (e.g., Archer, ServiceNow, OneTrust, IBM OpenPages)
Strong proficiency with reporting and analytics tools (e.g., Power BI, advanced Excel)
Practical experience using AI-enabled risk, compliance, or data analytics tools to enhance oversight and reporting (e.g., Microsoft Co-Pilot, ChatGPT Enterprise)
Ability to automate reporting and improve risk visibility
Benefits
Competitive compensation
Annual bonus eligibility
A generous retirement plan
Hybrid work schedule
Health and wellness benefits, including online therapy
Paid time off for vacation, illness, medical appointments, and volunteering days
Family care resources, including fertility and adoption benefits
Company
T. Rowe Price
T. Rowe Price is an investment management firm that focuses on funding technology startups.
5001-10000 employees
H1B Sponsorship
T. Rowe Price has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (80)
2024 (67)
2023 (58)
2022 (113)
2021 (67)
2020 (70)
Funding
Current Stage
Public CompanyTotal Funding
unknown1986-04-11IPO
Leadership Team
Ramon Richards
Chief Technology Officer
G
Geoffrey Hardin
Vice President, Senior Rates / FX Trader
Recent News
2026-01-09
Company data provided by crunchbase