Data Protection & Technology Senior Associate

About the position

JOB DESCRIPTION:

• Being a member of the Data Protection team, this position will support the efforts of Data Protection and Technology Services to ensure our adherence to regulatory and legal data protection and privacy requirements, supporting all lines of businesses and across all functional areas of our company and its companies globally.

RESPONSIBILITIES:

• Keep abreast of and maintain a current understanding of global data privacy laws and regulatory requirements that apply to our company and its companies.
• Conduct annual privacy inventory of data and processing activities, performing PIA and DPIAs.
• Manage and respond to inquiries received in the privacy mailbox and provide consultation, guidance, or escalate as needed.
• Perform privacy vendor evaluations to assess regulatory and privacy risks and practices associated with the onboarding of third parties.
• Liaise with business lines to identify privacy risk areas and determine appropriate privacy controls to limit privacy risks to new projects, cloud hosing initiatives and/or special projects.
• Draft and/or maintain our privacy policies, procedures and guidelines as needed. Assist other business lines with policies that may have an impact to individuals privacy (e.g., employee handbook, technology usage, social media policy, etc.)
• Assist in the review of changes to applicable laws and regulations and interpretation of impact to the company and its companies.
• Assist with annual privacy training and ongoing awareness program.
• Assist with procedures to address Data Subject Access Requests
• Assist with the annual review of monitoring policies to prevent the loss of personal data/data leakage prevention monitoring.
• Aligns risk and control processes into day-to-day responsibilities to monitor and mitigate risk; escalate appropriately.
• Keep current on evolving technologies (e.g., AI) and the associated risks and impact to data protection.
• Assist with data breach investigations, management reporting, and trend analysis impacting data privacy and/or client confidentiality.
• Support other daily program elements as needed.

**NOTE: The Primary Responsibilities of this role are not limited to the details above. **

QUALIFICATIONS:

• Minimum of 6 years of related experience
• Bachelor's degree preferred or equivalent experience.
• Relevant industry certification (e.g., CIPM, CIPP EU/A/C/US, CISSP, etc.
• Relevant experience to include (e.g, data privacy, audit, information security, risk management, etc.)

Must Have

• Minimum of 6 years of related experience
• Bachelor's degree preferred or equivalent experience.
• Relevant industry certification (e.g., CIPM, CIPP EU/A/C/US, CISSP, etc.
• Relevant experience to include (e.g, data privacy, audit, information security, risk management, etc.)

Place of work