Senior Data Privacy Analyst
Primary Responsibilities: The candidate will be responsible for supporting Privacy and
Compliance Strategy Planning for the Americas, which may include the following:
- Conduct privacy impact assessments (PIAs) to assess and mitigate risks related
to processing, transmission and storage of personally identifiable information
(PII).
- Maintain registry of data stores and processes that affect personal information.
- Assist in developing a strategic road map to evolve the privacy program and fulfill
internal and external compliance and privacy audits or assessments.
- This candidate should have familiarity with North and South American privacy
and data protection laws and regulations, including:
o CCPA/CPRA and other US state privacy laws
o Canada’s PIPEDA and Quebec’s Law 25
o Mexico’s LFPDPPP
o Brazil’s LGPD
- Self-starter, able to work with little supervision.
- Good verbal and written communication skills are required as this position entails
extensive interaction with business teams.
Summary of Duties:
- Assist with privacy strategic planning and implementation.
- Conduct gap analyses and assessments of the privacy program.
- Assist with developing a strategic roadmap to evolve the privacy program.
- Enforce policies and procedures related to data.
- Provide regular program status reports and metrics to management.
- Assist in fulfilling internal and external program audits or assessments.
- Develop and drive privacy training and awareness campaigns.
- Participate in new business initiatives and product development activities to
champion privacy-by-design principles and identify and escalate privacy
considerations.
- Ensure that business units and vendors are complying with privacy requirements
and address privacy concerns.
- Collaborate with and assist business units to develop corrective action plans for
identified privacy compliance issues.
- Continuously monitor the status and effectiveness of privacy controls.
- Ensure privacy-related key risk indicators are effectively monitored to prevent an
unacceptable impact on business objectives and reputation.
- Update and re-evaluate the extent to which customer and employee information
is collected and shared internally and externally.
- Respond to data subject rights requests (DSRs).
Professional Skills Requirements
- Proficiency with OneTrust or similar privacy tool.
- Excellent communication (verbal and written), facilitation, and interpersonal skills,
including the ability to influence across all levels of an organization.
- Inquisitive, adaptive, and agile learner.
- A hands-on privacy practitioner with the ability to shift between operational and
strategic mindsets.
- Highly motivated self-started with the ability to work collaboratively and
independently.
- Demonstrated ability to navigate unstructured processes and to simultaneously
manage responsibilities of multiple/concurrent work streams and competing
demands.
- Demonstrated competency in thinking strategically, analytically, conceptually, and
innovatively, including the ability to synthesize and analyze data.
- Ability to flourish in a challenging, fast-paced, constantly evolving environment,
operate with high standards and integrity, and exhibit excellent multi-tasking
skills.
- Demonstrated ability to build relationships, establish trust, and form effective
alliances across teams and functions to ensure optimal end-to-end delivery.
- Demonstrated commitment to high quality and attention to detail.
- Demonstrated ability to work cross-functionally with multiple stakeholders and
competing priorities.
- Must have a reliable internet connection.
- Must be able to work Pacific time zone hours.
Preferred Qualifications
- Bachelor’s Degree in Pre-law or Computer Science related fields.
- Experience in data privacy program development and management.
- Privacy Certifications such as:
o IAPP: CIPP/US, CIPP/C, CIPM, or CIPT
o ISACA: CDPSE
- Ability to obtain buy-in from key business and technology stakeholders for key
data privacy initiatives.
- Strong program and/or project management skillset with proven experience
managing concurrent initiatives.
- Demonstrated ability to understand and articulate the complexity of business.
processes, and build/develop practical communications plans based upon those
needs.
- Prior consulting experience in data protection.
Apply tot his job
Apply To this Job