Job Description

Requisition ID # 172983

Job Category: Compliance / Risk / Quality Assurance

Job Level: Individual Contributor

Business Unit: Gen Counsel, Ethics, Risk & Compliance

Work Type: Hybrid

Job Location: Oakland

Department Overview

In Enterprise Risk and Compliance, the Privacy team delivers a broad range of expertise to drive integrated, cross-organizational solutions to effectively manage privacy risk and compliance for the enterprise. By providing strategic guidance and program governance, the team helps the organization balance risk, compliance, regulation, operations, and customer and coworker experience. We aspire to build leading programs that enable Enterprise Risk and Compliance and PG&E to thrive in our management of risk, compliance, audits, and privacy.

The Privacy Specialist Expert plays a critical role in supporting the development, execution, and ongoing management of the organization’s privacy program. This position partners closely with cross-functional teams and leadership to advance initiatives that enhance data protection and compliance program maturity and strengthen overall management of personal data privacy.

The Privacy Specialist Expert contributes to the Privacy team’s mission by providing subject matter expertise to leadership and business partners. Key responsibilities include supporting the design, implementation, and monitoring of privacy controls, as well as assisting in the development and tracking of mitigation plans to address identified risks.

This position is hybrid, working from your remote office and your assigned work location based on business needs or company requirements. The assigned work location will be within the PG&E Service Territory and will be agreed upon by the successful candidate and hiring leader.

individual will be based on multiple factors, including, but not limited to, internal equity, specific skills, education, licenses or certifications, experience, market value, and geographic location. The range to reasonably expect will be around the minimum and the midpoint. The final decision will be made on a case-by-case basis related to the factors above. This job is also eligible to participate in PG&E’s discretionary incentive compensation programs.

Bay Area Min: $128,000

Bay Area Mid: $173,000

Bay Area Max: $218,000

Job Responsibilities

The Privacy Specialist Expert will report to the Manager of Privacy and will primarily hold the following responsibilities:

• Drive continuous improvement in privacy compliance program; consistently demonstrating innovative new thinking focused on strategy, performance and implementation.
• Assist all levels of leadership to support strategic planning and influence decisions around compliance issues.
• Leads incident investigation and response for complex data loss events; partners with Functional Areas to develop and implement corrective actions to prevent reoccurrence.
• Support development of materials for educating employees and leaders on shared compliance to support organization-wide awareness of privacy best practices.
• Identifies and analyzes privacy and data protection issues including required privacy notices, regulatory filings, relevant process and infrastructure requirements, and industry trends and best practices.
• Creates procedures, controls and guidance documents for access to enterprise personal data to ensure compliance with relevant privacy and data protection laws.
• Manages major cross-functional projects and initiatives, with a focus on building in privacy compliance.
• Manage day-to-day operational processes of the privacy team including but not limited Privacy Risk Assessments, Data Loss Investigations, and Individual Rights Requests.
• Assist other compliance-related projects and activities, as directed.
• Provides mentorship and coaching to developing team members, strengthening privacy expertise, enhancing compliance capabilities, and supporting ongoing professional growth.

Qualifications

Minimum

---------------------------

• BA/BS or equivalent work experience in Management, Business, Risk, Compliance, Privacy or related discipline
• 6 years of relevant business experience, such as risk and compliance management, privacy or related field

Desired

---------------------------

• Consistent demonstration of a high level of innovative and new thinking focused on compliance strategy, controls, and implementation
• Application of demonstrated knowledge and skill to resolve complex problems
• Ability to identify and implement program and process improvement opportunities, including competency in making sense of complex and sometimes contradictory information to effectively solve problems
• Ability to effectively communicate highly complex data and findings to diverse audiences using a variety of media
• Proficient with Microsoft Office products including Word, Excel, PowerPoint
• Skill in facilitating discussions and meetings as needed to perform at the job level
• Excellent verbal and written communication skills
• Certified Information Privacy Manager (CIPM) certification
• Certified Information Privacy Professional (CIPP-US)