Senior Privacy Risk Analyst

Job Summary

The Senior Privacy Analyst (SPA) will assist the Head of Privacy in managing the operation of a privacy team for a rapidly growing multinational corporation.

The SPA will work closely with the Legal Department and key stakeholders to support the development and implementation of Sorenson’s data privacy program.

This includes supporting the development of strategies, policies, and procedures related to the protection of data throughout its lifecycle.

The SPA will design and consult on the implementation of privacy controls, perform testing and audits of privacy requirements and manage remediation efforts across the enterprise.

• The SPA will work with stakeholders to define the privacy requirements for external organizations with whom Sorenson has a business need to share information;
• will facilitate compliance with identified requirements to control risk; will represent the privacy program to internal and external stakeholders;

and will support the development and implementation of privacy training and awareness programs. The role will conduct internal testing to measure compliance with HIPAA, GDPR, CCPA, ISO, NIST and other regulations and frameworks.

This position will report to the Head of Privacy.

Essential Duties and Responsibilities

Use automated tools for implementation of privacy compliance

Develop and report regular program metrics

Develop guidance data privacy risk assessment process

Summarize privacy risks, categorize potential concerns

Privacy Policies consistent with current and emerging laws

Organize, train and assist Privacy Liaisons pursuant to Privacy Liaison Program

Assist in development of core strategies for Data Privacy Program

Act as lead in maintenance, development and implementation Sorenson's privacy program and the resulting privacy policies, procedures and documentation

Research privacy regulatory issues

Perform privacy risk assessments and audits

Perform and lead the performance of Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIAs)

Monitor continuous privacy team adherence to the privacy program’s requirements

Develop internal controls to support and enforce the Privacy program

Capture and analyze information to identify key risks and corresponding controls

Systematically test and evaluate controls to verify efficiency and effectiveness of operation, re-liability of information and compliance with applicable laws and regulations.

Communicate findings and recommendations to management

Follow-up and implement corrective actions

Deliver training to other members of the company on policies and procedures

Work with Compliance Department, IT, and department managers to support annual external industry standard security and privacy audits conducted by external audit firms

Consult on company projects to ensure that privacy risks are being addressed

Other duties as assigned

Supervisory Responsibility

This position manages employees and is responsible for the performance management and hiring of the employees.

Travel Requirements

Travel Requirements : Less than %-%-%-%

Education

Minimum : Year / Bachelors Degree

Bachelor's Degree in related field

Experience

to years of experience in privacy program management

Experience with Privacy / GRC tools for information gathering and reporting

Knowledge, Skills, and Abilities

Knowledge of government and / or industry regulatory requirements (GDPR, CCPA, HIPAA, etc.)

One or more of the following Certifications is preferred but not required : Certified Privacy Professional, CRISC, Certified Information Systems Auditor, Certified Information Privacy Management (CIPM).

Basic understanding of systems development life cycle methodologies required.

Working Conditions and Physical Requirements

Corporate office environment

Operation of office equipment including computers.

Ability to sit for long periods of time while operating a computer.

Dexterity of hands and fingers to operate a computer keyboard, mouse, tools, and to handle other computer components

Periods of standing.

Some light to moderate lifting.

Disclaimer

This position has access to highly confidential, sensitive information relating to the employees, customers, and technologies of Sorenson Communications.

It is essential that applicant possess the requisite integrity to maintain the information in strictest confidence.

Apply today!

Equal Employment Opportunity :

Sorenson Communications is an EOE, Disability / Age Employer.

Company Summary

Our Mission Harnessing the power of language, we connect diverse people and enrich the human experience.

Our Vision To provide global language services that expand opportunities, nurture belonging, and empower the world to connect beyond words.

As one of the world’s leading language services providers, Sorenson combines patented technology with human-centric solutions.

We strive to increase diversity, equity, inclusion, and accessibility for underrepresented people through communication solutions for all : call captioning and video relay services, over-video and in-person sign language and spoken language interpreting, translation, real-time captioning, and post-production language services.

Sorenson’s impact vision and plan extends to supporting employment opportunities for diverse employees, customers, and communities.

As a minority-owned company, we are committed to expanding opportunities for underserved communities while promoting an inclusive workplace for our own employees.