Stefanie Parente

Deputy Chief Compliance Officer/Chief Privacy Officer @ SANTANDER HOLDINGS USA, INC

About

I am a compliance and risk executive with 20+ years of experience leading transformation across global banking, fintech, and financial services. My career has been defined by building compliance, privacy, and risk frameworks that not only withstand regulatory scrutiny but also enable organizations to innovate and grow with confidence. As Deputy Chief Compliance Officer, I have partnered with Boards, regulators, and C-suites to modernize governance, embed compliance into digital transformation, and lead large-scale remediation initiatives. My leadership is grounded in driving cultural change—fostering accountability, resilience, and sustainable risk management practices across complex organizations. Key areas of expertise include: Compliance transformation & regulatory remediation Global privacy & data protection (GLBA, GDPR, CCPA, HIPAA) Digital & cloud compliance integration Cybersecurity, information governance & third-party risk Board & executive committee advisory I thrive at the intersection of compliance, technology, and innovation—helping organizations anticipate regulatory shifts, mitigate risk, and achieve operational excellence.

Country

United States

City

Greater Boston

Industry

Banking

Skill

Legal Writing, Legal Compliance, Privacy Compliance, Data Breach Management, Regulatory Oversight, Fraud Compliance, Cybersecurity Oversight, Third Party Risk Management, Information Assurance, Fintech Compliance, IT Risk Management, Incident Response, Breach Management, Regulatory Compliance, Digital Transformation, Board of Directors Reporting, Risk Management, Operational Risk, Privacy Law, Financial Risk

Experience

Deputy Chief Compliance Officer/Chief Privacy Officer

SANTANDER HOLDINGS USA, INC

2024-4 - Present · 2 yrs 5 mos

Partner with the CCO and senior executives to drive enterprise compliance strategy, embedding compliance into digital transformation and agile development programs. Lead remediation initiatives that strengthened governance, reduced regulatory findings, and enhanced examiner confidence. Advise Board and executive committees on emerging risks, regulatory expectations, and compliance culture. Oversee GLBA Safeguards Rule compliance, including cybersecurity, resiliency, and third-party oversight

Chief Privacy Officer

Santander US

2018-1 - 2023-3 · 5 yrs 3 mos

Boston

Built the first U.S. Privacy Program across subsidiaries, including governance, monitoring, and enterprise-wide training Spearhead transformation projects to strengthen privacy, reputation risk, and consumer compliance frameworks within enterprise risk management. Direct oversight of GLBA Safeguards Rule requirements including information security, resiliency, and third-party risk. Led regulatory remediation initiatives, reducing findings and strengthening examiner confidence in compliance maturity.

Chief Privacy Officer

Viewpost

2013-2 - 2023-3 · 10 yrs 2 mos

Maitland, FL

Designed enterprise risk frameworks spanning regulatory risk, AML, fraud prevention, and information security. Completed FFIEC Cybersecurity Assessment; ensured compliance across hybrid on-premise/cloud environments. Partnered with internal counsel on contracts, licensing, and regulatory compliance. Oversaw ISO 27001 certification, SOC 1 Type 2 audits, and AWS cloud migration with zero audit findings. Launched a phishing education program recognized with the CSO50 Award (2015).

Oversight and Governance - Fraud Prevention

RBS Citizens Financial group

2012-5 - 2013-2 · 10 mos

Governed enterprise FACTA Identity Theft Red Flags Program, redesigning risk assessment to enhance compliance effectiveness. Directed FFIEC authentication and internet banking risk assessments; authored annual Board report on regulatory compliance.

Privacy Officer- Vice President

Citizens Financial Group

2008 - 2012 · 4 yrs

Managed customer incident response program, including large-scale, multi-country data breach with customer and regulatory notifications. Acted as subject matter expert for multi-year remediation initiatives involving regulatory reporting, control testing, and management challenge. Co-developed vendor assurance program and integrated privacy requirements into third-party oversight.