Job Description

Monitor and interpret global, federal, and state privacy regulations and assess their applicability to the organization.

· Conduct and support Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).

· Collaborate with IT, Security, Legal, and business units to ensure privacy by design and default principles are embedded in systems, products, and services.

· Evaluate third-party data processors and vendors for privacy compliance through risk assessments and due diligence.

· Track, investigate, and respond to privacy incidents and breaches, including root cause analysis and regulatory notifications.

· Maintain the Record of Processing Activities (RoPA) and data inventory documentation.

· Develop and deliver privacy training and awareness programs across the organization.

· Assist with audits, assessments, and regulatory inquiries related to data privacy.

· Contribute to the development, review, and implementation of privacy policies, procedures, and governance frameworks.

· Stay current with changes in privacy laws, enforcement actions, and industry trends.

· Other duties as assigned.

Will be supporting the EU/UK region primarily so familiarity with the GDPR is important.