Business Analyst, Data Privacy / NIST - 33356829

Job Description

Job Description

Business Analyst

A career with us means you will work alongside exceptional people and be empowered to reach your professional and personal goals.

Our employees are the foundation of what makes our client a strong stable and ethical business. We seek and value unique and varied perspectives and experiences because we believe we are stronger when all voices are heard.

We are looking for a business-minded privacy analyst to support consistent application and adherence to privacy policies, standards and controls across the enterprise.

You will have oversight to the privacy assessment process, optimization of DPIAs, where a records of processing activity or a DPIA will be required, write, modify and implement policies, standards, controls.

You will be part of a team that provides expert privacy guidance to enable data products and services to meet and exceed privacy requirements.

You will :

• Champion the privacy operations capabilities, including conducting data protection impact assessments (DPIAs) and managing a comprehensive data inventory, as core activities to reducing enterprise privacy risk
• Ensure the appropriate policies, standards and controls are in place and adhered to using the NIST-Privacy framework.
• Implement privacy standards, policies, and controls within enterprise processes and change management practices, as appropriate, and communicate the value and importance of business partner engagement with privacy standards, policies, and controls
• Draft / revise additional policies, standards, and controls as necessary to ensure that the privacy team continues to have a comprehensive, global privacy framework in place to manage risks, and support monitoring and testing of controls
• Assess, manage and prioritize remediation for risks and issues discovered from data protection impact assessments (DPIAs)
• Analyze assessment processes to ensure consistent application and determine continuous improvement necessary to evolve the privacy programs assessment capability to desired levels
• Report on privacy operations metrics and KPIs and revise metrics and KPIs as necessary to measure the assessment capability within the privacy program
• Partner with privacy program lead to strengthen the overall value of the program to the enterprise to effectively manage risks, keep pace with privacy regulations, and enable customer trust, including via conducting periodic privacy risk assessments
• Partner with other members of the DAIG team to represent the privacy domain within a multidisciplinary assessment squad and act as a SME on all things policies, standards, and controls and data protection impact assessments (DPIAs)

Skills : .

• Bachelor's degree or equivalent
• A minimum of five years of operations experience engaged in privacy / data governance and technology projects with an understanding of data protection, data governance, and privacy
• Experience writing policies, standards, or controls, or supporting organizational adherence to policies, standards, and controlsor other experience completing critical analysis, review, and editing of written documents
• Knowledge of privacy tools, technologies, and best practices supporting compliance with CCPA, CPRA, GDPR and the ability to research and understand new privacy legislation
• Comfortable expressing a point of view and influencing change, as appropriate
• Strong communication skills, presentation, and negotiation skills
• Strong analytical and problem-solving skills

Project management skills

• Track record of being a valuable partner with other teams in the business
• Orientation to continuous improvementand learning new technologies and tools

Bonus Points if You Have

• IAPP privacy certifications a plus.
• Knowledge of the NIST-Privacy framework
• Knowledge about privacy law such as GDPR, CCPA / CPRA
• Experience with GRC tools such as Archer.
• Experience providing guidance as a SME in the corporate environment
• Experience in IT, data protection, information security, privacy technologies, technology, marketing, and / or advertising technology.
• Education : Bachelor's degree or equivalent
3 days ago