Data Privacy Analyst

Become a Data Privacy Analyst for Bloomreach! Reporting to the Head of Governance, Risk, and Compliance (GRC) in the Global Information Security and Technology Department (GIST), the Privacy Specialist shall oversee all ongoing activities related to the development, implementation and maintenance of Bloomreach's privacy policies, standards, and procedures in accordance with applicable global laws and regulations with particular experience in GDPR.

You will be working in one of our Central European offices (Bratislava, Brno) or from home (based in EU) on a full-time basis and you´ll become a core part of the Governance, Risk, and Compliance (GRC) Team. The starting salary for Slovakia is € 2 500 monthly along with stock options and other benefits.

The Privacy Specialist is responsible for the Bloomreach’s Privacy Program including but not limited to daily operations of the program, development, implementation, and maintenance of policies and procedures, monitoring program compliance, investigation and tracking of incidents and breaches and ensuring compliance with global privacy laws and regulations. Moreover, you will:

• Build a strategic and comprehensive privacy program that defines, develops, maintains and implements policies, standards, and processes that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of personal data across all media types
• Work with Bloomreach’s Head of Governance, Risk, and Compliance (GRC) management  to establish governance for the privacy program, serving as a staff specialist for privacy compliance
• Collaborate with GRC, Legal, and the Data Protection Officer (DPO) to ensure alignment between security and privacy compliance programs including policies, practices, investigations as a liaison to the Global Information Systems and Technology (GIST) department
• Establish an ongoing process to track, investigate and report inappropriate access and disclosure of personal information. Monitor patterns of inappropriate access and/or disclosure of protected privacy information
• Perform or oversees initial and periodic information privacy risk assessment/analysis, mitigation and remediation
• Conduct related ongoing compliance monitoring activities in coordination with the organization's other compliance and operational assessment functions
• Take a lead role, to ensure the organization has and maintains appropriate privacy and confidentiality materials reflecting Bloomreach and legal practices and requirements
• Oversee, develop and deliver initial and ongoing privacy training to the workforce
• Participate in the development, implementation, and ongoing compliance monitoring of all vendor and third party agreements, to ensure all privacy concerns, requirements, and responsibilities are addressed
• Manage all required breach notification processes under the guidance of the GRC, Legal, and the DPO, and establishes and administers a process for investigating and acting on information privacy issues
• Perform required breach risk assessment, documentation, and mitigation. Works with Human Resources to ensure consistent application of sanctions for privacy violations
• Initiate, facilitate and promote activities to foster information privacy awareness within the organization and related entities
• Maintains current knowledge of applicable national, federal and state privacy laws and accreditation standards

• 3+ years in information privacy, security, and/or information risk and governance 
• Knowledge and experience in national, state and/or federal information privacy laws, including but not limited to GDPR 
• Demonstrated organization, facilitation, written and oral communication, and presentation skills
• Recommended privacy certification
• Familiarity with Privacy relevant Global legislation and standards for the protection of Personal Information

• Demonstrated skills in collaboration, teamwork, and problem-solving to achieve goals
• Demonstrated skills in verbal communication and listening
• Demonstrated skills in providing excellent service to customers
• Excellent writing skills

#LI-AC1