Privacy Analyst

Summary Privacy Analyst
Responsible for the review and investigation of privacy incidents. Supports the administration of other designated privacy related program activities and applications. Highly organized, confident, articulate and a task oriented individual that pays attention to detail and can handle multiple tasks simultaneously. Uses specific knowledge of Privacy to achieve goals through own work. Has specific knowledge or expertise typically gained through formal education or equivalent experience. Uses expertise to provide guidance to others as a project manager or consultant. Requires conceptual knowledge of theories, practices, and procedures within Privacy. Performs routine assignments using existing procedures. Receives instruction, guidance and direction from more senior level roles.
Major duties

• Reviews and investigates on daily privacy incident reports submitted to the team
• Determines privacy incident that may require escalation
• Ensures that privacy incidents are review in a timely manner; escalates when schedules are not met
• Interfaces with compliance officers, business management, legal, and other stakeholders to complete privacy incidents root analysis
• Recommends improvements to privacy incident processes and applications
• Prepares reporting (metrics) on privacy incidents, including items escalated
• Provides support in organizing presentations and events delivered to internal stakeholders and teams as well as clients
• Provides support with updating and maintaining internal procedures and standards
• Performs other designated compliance program activities and supports the administration of other compliance applications, as directed
• Maintains knowledge of industry practices, GDPR, CCPA, Data Privacy Act and regulatory changes relevant to privacy breach notifications
• Uses existing procedures to solve standard problems; analyzes information and standard practices to make judgments.
• Works within procedures and practices to achieve objectives and meet deadlines

Knowledge / Skills

• Requires experience with privacy incident investigation
• Risk management and/or compliance background preferred; institutional knowledge a definite plus
• Requires knowledge of the privacy regulations/laws
• Requires strong analytical skills, attention to detail and critical thinking
• Requires excellent writing and verbal communication skills
• Has the ability to multi-task, prioritize work and strong organizational skills are required to ensure that deadlines are met
• Must be able to develop and articulate strategy for process improvement
• Works effectively as a team member but can also work independently
• Must have ability to interface with all levels of management
• CIPP or CIPT certification is a definite plus
• Requires conceptual knowledge of theories, practices and procedures within Compliance Privacy
• Applies general knowledge of business developed through education or past experience
• Exchanges straightforward information, asks questions and checks for understanding

Experience

• A College or University degree and/or relevant proven work experience is required
• At least 3 years related experience in data privacy and compliance functions