Data Privacy Sr. AnalystThe Data Privacy Sr. Analyst will provide leadership, independent oversight, guidance, and direction necessary to maintain ongoing compliance with data privacy and the protection of PII (personally identifiable information), PHI (protected health information) and other sensitive data elements related to global data privacy regulations applicable to the company.
This position is a key member of the Data Governance, Protection and Privacy team. If selected, you will be responsible for day-to-day operations of the data privacy program, supporting privacy frameworks, risk assessments, data maps, as well as awareness around data privacy programs as applicable. Knowledge of data privacy governance principles combined with soft skills related to influence, presentations and general privacy awareness and training will be key for this role.
This position will be based in Houston, Texas.Responsibilities may include:Technical UnderstandingOwn and keep under constant review all the company’s global data protection compliance arrangements to include updating policies and guidance, centralizing processes and putting in place robust, time-bound remedial plans where necessary.Develop and maintain relevant global internal data privacy policies and training.Work with Legal and HR to ensure applicable Data Privacy laws and statutes are accounted for in the overall program development and maintenance.Partner with all key business areas, in particular the IT Security team, Business Leaders, HR and Legal, to ensure data privacy issues are considered at the outset of new projects, products and initiatives.Act as a liaison to the company’s Information Governance Committee in relation to global data privacy issues.Help manage the data privacy network across all global offices.Handle enquiries and issues in conjunction with HR and Legal relating to data privacy practices, withdrawal of consent, the right to be forgotten, and related rights.Monitor the industry landscape to keep visibility on evolutions, trends, and best practices related to Data Privacy.Ensure that systematic compliance audits are undertaken and that their findings are reported and acted upon.The use of One Trust that manages our data quality, usability, and integrity.Basic/Required:5-7+ years of experience of Data Privacy experience5-7+ years of experience with Data Privacy Program developmentDemonstrate deep knowledge of data privacy, data handling and data classification.Demonstrate experience of managing data privacy issues in a global organization.Expertise in global and European data protection laws and practices and an in-depth understanding of GDPR, GDPR-UK, Norway Privacy law, US state privacy laws, China PIPL, Australia Data Privacy, Malaysia PDPA, Singapore PDPA, Qatar Data Privacy Law etc.Capable of conducting data privacy compliance reviews and assessments working locally and with regional contacts; Support any data privacy audits internal or externalHave the ability to develop awareness and communications at all levels within the company.Preferred:Bachelor's degree or higher in Business Admin/Mgmt., Computer Science, Engineering, Information Technology, Management Information Systems, other related business field, other related technical field, or foreign equivalent5-7+ years of experience in Data Privacy, Data Protection and Data GovernanceBasic knowledge in data privacy procedures, standard methodologies, and implementation of privacy programsAn excellent teammate with the ability to get results quickly and efficiently, both internally and with outside vendorsAbility to rapidly develop a conceptual understanding of environments that are new to them and provide insight into the analysis of related eventsAbility to resolve complex issues related to privacyAdvanced proficiency with Microsoft O365 applications: Excel, Outlook, PowerPoint, SharePoint, Teams and WordTakes ownership of actions and follows through on commitments by holding others accountable and standing up for what's rightDelivers positive results through realistic planning to accomplish goalsBuilds effective solutions based on available information and makes timely decisions that are safe and ethicalUnderstanding of common privacy industry standards and regulations (e.g., GDPR, CCPA, LGPD, PIPEDA, HIPAA/HITECH, COPPA, U.S. State Breach Disclosure Laws, CANSPAM, GLBA) and industry frameworks (e.g., NIST, GAPP, ISO)Privacy/ Auditing Certifications - CIA, CISA, CIPP - A/US/E/ C, CIPT, CISSPUnderstanding of OneTrust Privacy Modules