Privacy Senior Analyst

Description

The Senior Privacy Analyst is responsible for administering all aspects of the Credit Union’s Privacy Program including but not limited to daily operations of the program, development, implementation, and maintenance of policies and procedures, monitoring program compliance, ensuring adherence with federal and state privacy laws and regulations, and creating enterprise-wide strategy for continuous improvement of the privacy program.

SCHEDULE

Full-Time

LOCATION

Mountain America Center

9800 S Monroe St

Sandy, Utah

To be effective, an individual must be able to perform each job duty successfully.

Build, refine, and implement a strategic and comprehensive privacy program that defines, develops, maintains and implements policies and processes that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of nonpublic personal information (NPI) across all media types.
Ensure that privacy disclosures, policies, standards, and procedures are up-to-date, compliant with applicable laws and regulations, and consistent with the Credit Union’s use of member and employee data.
Work with Credit Union leadership to establish, implement, and monitor governance of the privacy program.
Collaborate with the information security officer, compliance teams, and data governance team to ensure alignment between information security, data governance and privacy compliance programs including policies, practices, investigations.
Collaborate to ensure alignment between data governance and privacy compliance programs.
Ensure that privacy risk is accounted for in enterprise and team risk assessment, mitigation and remediation.
Work with Information Security teams to ensure that the Credit Union’s acceptable use procedure for artificial intelligence adequately addresses privacy concerns; thereafter, work with operational teams to ensure adoption of the acceptable artificial intelligence use procedures.
Partner with internal teams to ensure sufficient ongoing privacy training for Credit Union employees.
Coordinate with the Legal and Vendor Management team to ensure that third-party contracting and monitoring adequately addresses privacy practices of third and fourth parties that may process, possess, access, or transmit NPI.
Prepare reports to the Credit Union board and/or senior management regarding all aspects of the privacy program.
Maintain current knowledge of applicable federal and state privacy laws and regulations.
Partner with leadership to represent the Credit Union’s information privacy interests with external parties (state or local government bodies) who undertake to adopt or amend privacy legislation, regulation, or standards.
On collaboration with the Data Governance team, Administer the end-to-end data deletion request process as set forth in the CCPA or other similar privacy laws.
Serve as information privacy subject matter expert for all privacy related issues.

KNOWLEDGE, SKILLS, and ABILITIES

The requirements listed are representative of the knowledge, skills, and/or abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions.

Knowledge

Thorough knowledge of privacy laws and regulations like GDPR, GLBA, CCPA, etc. Understanding of privacy frameworks like NIST 800-53. Knowledge of privacy best practices for notices, assessments, incident response, etc.

Experience

At least 4 years of professional experience in privacy, data protection, compliance, IT audit, or a related field. Specific experience managing privacy programs and initiatives is preferred.

Education

A bachelor's degree in a relevant field like information technology, computer science, or business is usually required. Education must be from an accredited institution. Education and work experience will be verified.

Licenses, Certifications, Registrations

Obtaining a privacy certification like CIPP, CIPM, and/or CIPT is highly recommended.

Managerial Responsibility

This role does not presently have management responsibility. However, as responsibilities evolve with changing regulatory environment and Credit Union growth, future management responsibilities are anticipated.

Computer/Office Equipment Skills

Demonstrated proficient skills with Microsoft Office Suite including Outlook, Word, PowerPoint, and Excel.
Ability to learn GRC platform such as Archer.

Language Skills

Demonstrated ability to clearly communicate verbally and in writing.
Demonstrated ability to read and follow instructions.

Other Skills and Abilities

Demonstrated excellent customer service skills.
Proactively solves problems and actively improves processes and create efficiencies.
Professional, exercises personal discretion and independent judgement.
Adaptive to change, responds positively to altered circumstances or conditions.

Excellent inter-personal skills, including the ability to lead and collaborate with multiple teams.
Possess a desire and willingness to learn and continually update knowledge of financial concepts, strategies, systems etc.

PHYSICAL ABILITIES / WORKING CONDITIONS

Physical Demands

Ability to sit, talk and hear consistently

Ability to stand, walk, and use hands to handle or reach occasionally

Vision Requirements

Close vision (clear vision at 20 inches or less)

Distance vision (clear vision at 20 feet or more)

Weight Lifted or Force Exerted

Ability to lift up to 25 pounds occasionally may need to lift up to 50 pounds.

Environmental

There are no unusual environmental factors (such as a typical office)

Noise Environment