Position: Privacy Officer
Location: Atlanta, GA 30309
Term: 12 months
Day-to-Day Responsibilities:
- Identify evolving privacy requirements and risks across our Americas business and enable alignment to organizational privacy strategy, framework, standards across the region
- Support the company in the interpretation of and compliance with privacy regulations across the region (e.g. CCPA, GLBA, PIPEDA, US State of breach laws, etc.), and globally as required.
- Assess, identify, and address evolving privacy risks in the regional business operations, and development of new products, services, and technologies across the region.
- Support the implementation of company-wide privacy policies processes and procedures across the region.
- Act as primary relationship and contact for local/regional regulators as required and fulfillment of local/regional statutory responsibilities for privacy as assigned.
- Support business functions with definition and/or improvement of function-level privacy processes and procedures, the maintenance of their personal data inventories, and conducting Privacy Impact
- Assessments, including risk analysis and mitigation.
- Initiate, facilitate, and promote activities to foster privacy awareness within the organization and deliver training activities to ensure that employees across the region are well-informed on key privacy issues.
- Lead and coordinate investigations into privacy incidents, breaches, and complaints and undertake reporting/remedial action as required.
- Coordinate and support the execution of Data Subject Right requests, aligned with local/regional regulatory requirements.
- Define and maintain privacy-related management information and metrics to assist with regional reporting and demonstrate accountability to relevant stakeholders across the region (e.g. Boards, Regulators).
Is this a good fit? (Requirements):
- Degree in Law, Information Security, Privacy, Management Information Systems, or Computer Science is preferred or commensurate relevant work experience. At least one certification in Privacy and/or Security (e.g. CIPP/US, CIPM, CISM, CISSP) or equivalent.
- 7 years of experience in the privacy/security discipline, including demonstrable capabilities in leadership and engagement with senior management.
- Working in large/global corporate environments involving multiple businesses across a matrix organization. Building and managing relationships at all levels of the organization experience.
- Translating privacy and/or security regulations into workable and implementable solutions experience.
- Reporting (including developing relevant metrics) and presenting to senior/executive management and other audiences experience.
- Implementing and using OneTrust, or similar enterprise privacy management systems experience.
- Assessing privacy considerations of cloud platforms, enterprise data lakes, digital marketing data analytics, or similar experience.
- In-depth knowledge and understanding of global privacy legislation (e.g. CCPA, GLBA, PIPEDA, US State of breach laws, GDPR etc.)
- Understanding of the financial services industry.
- Risk identification, assessment, response and mitigation planning, and reporting experience.