Privacy Analyst

Job Summary

The Privacy Analyst will work under the leadership of the VP of Data Privacy and Compliance Counsel to support various privacy compliance initiatives, including developing, implementing, and maturing a global privacy program. The Privacy Analyst will have opportunity to mature their privacy expertise and to learn the various facets of privacy compliance from employee related privacy issues to consumer and marketing compliance, as well as learning how to operationalize compliance for a global public company.

Duties & Responsibilities

The Privacy Analyst is responsible for assisting with or completing initiatives that relate to maintaining a privacy and data security governance program, such as:

• Draft privacy related policies and procedures, notices, and engage in vendor and data management;
• Privacy centric activities such as privacy impact assessments, risk reviews, monitoring of the Privacy program email account, responding to individual rights inquiries;
• Escalation of any remediation required based on results of compliance tasks;
• Maintaining organizational data mapping and follow up on legal requirements as a result;
• Collaboration with IT and the IS as required to develop and improve the privacy and data security stance of the company;
• Support the HR departments for the U.S. and Europe and other locations where the Company does business in all matters related to data processing
• Review data privacy provision in contracts and DPAs
• Consistently monitor and identify privacy and information security related risks based on latest laws and regulations, and work to mitigate those risks
• Review and analyze for privacy risks in product launches and work closely with the Engineering teams in implementing privacy requirements in the design and launch of products
• Work closely with the marketing team in connection with marketing and launch of products
• Serving as a privacy liaison to cross-departmental stakeholders in connection with business activities establishing solutions that integrate privacy requirements with global business priorities;
• Overseeing and managing all privacy and information security legal compliance tasks;
• Writing a wide variety of documents including process flow maps, how-to guides, privacy trainings, and instructions in an accurate and succinct manner;
• Reviewing current policy and procedure documents for thoroughness, drafts and submits improvement recommendations to appropriate approver and/or subject matter expert(s) for review, and edits and submits final documents;
• Assisting with development of action plans for issues/gaps identified during reviews and work with business stakeholders to determine appropriate remediation and monitoring routines.

Minimum & Preferred Qualifications and Experience

Minimum Qualifications

1. 3-4 years' experience in:

• One or more of the various privacy disciplines (e.g., policy, compliance, privacy, information security, operational risk management). Privacy experience is a must.
• Must have knowledge and understanding of U.S. (e.g., CCPA/CPRA) and European privacy (e.g., GDPR) and data protection laws and regulations. Knowledge of global data privacy laws (e.g., PIPL, PIEPDA) and HIPAA are a plus but not required. Ideal candidate should be able to demonstrate fluency in core data privacy and security principles
• Strong written and verbal communication skills is required and the ability to work cross-functionally with other departments.
• Must be a strong critical thinker and be able to analyze legal issues and make recommendations
• Self-starter with the ability to work well with business units and manage multiple projects
• Creative problem solving and analytical skills, and have the ability to conduct risk analysis for current and future projects

Preferred Qualifications

• IAPP certification (e.g., CIPP/US, CIPP/EU)

Education

• BA or BS in information security, business administration, or related area

Compensation: The anticipated range for this position is $90,000 - $110,000. Actual placement within the range is dependent on multiple factors, including but not limited to skills, education, and experience. This position also qualifies for up to 10% annual bonus based on Company, department, and individual performance.