Data Privacy Analyst

PRIMARY PURPOSE: Ensures compliance with privacy laws and regulations with internal stakeholders, manages the full life cycle of Data Subject Access Requests (DSAR) requests, and responds to escalated privacy and breach incidents.

ESSENTIAL FUNCTIONS and RESPONSIBILITIES

• Partners with Sedgwick business units to ensure compliance with applicable privacy laws and regulations.
• Analyzes escalated suspected privacy incidents reported to the privacy team to ensure appropriate and prompt response.
• Assists with escalated breach notification efforts including coordination with outside resources.
• Manages database(s) of privacy incidents and reporting.
• Keeps informed regarding pending privacy and industry laws, regulations, changes, trends, and best practices and assesses the potential impact of these changes on organizational processes and apprises Privacy team of relevant developments.
• Completes the full life cycle of Data Subject Access Requests (DSAR) requests.
• Ensures all DSARs are completed within agreed timeframes.
• Manages and maintains a DSAR log and produce reports and information summaries on DSARs.
• Liaises with internal stakeholders in matters relating to data breaches (including preparedness, prevention, impact mitigation and integral management of breaches) and DSARs (including information verification and request fulfillment).
• Completes other privacy-related tasks as assigned.

ADDITIONAL FUNCTIONS and RESPONSIBILITIES

• Performs other duties as assigned.

QUALIFICATIONS

Education & Licensing

Bachelor's degree from an accredited college or university preferred. Possession of relevant qualifications such as Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), or Certified Information Privacy Technologist (CIPT), or equivalent required.

Experience

Five (5) years of experience in privacy, compliance or a related field, or equivalent combination of education and experience required. Working knowledge of OneTrust platform preferred.

Skills & Knowledge

• Solid understanding of privacy laws and regulations, including GDPR, CCPA, HIPAA, and other relevant laws and regulations
• Experience in managing potential security incidents, including investigation and analysis
• Experience in fulfilling DSAR requests
• Ability to think strategically, assess risks and evaluate the potential consequences
• Sufficient commercial awareness to understand, manage and navigate client expectations
• Excellent communication skills, including the ability to communicate complex privacy concepts and communicate effectively with different stakeholders
• Strong project management and leadership skills, with the ability to manage multiple projects and priorities simultaneously
• Excellent working knowledge of Microsoft Outlook, Word, Excel, and online research tools and databases
• Experience in implementing privacy policies, procedures, and controls.
• Strong analytical and problem-solving skills
• Ability to work independently and collaboratively as part of a team.
• Willingness to learn and develop new skills
• Strong attention to detail
• Excellent oral and written communication skills, including presentation skills
• PC literate, including Microsoft Office products
• Analytical and interpretive skills
• Strong organizational skills
• Excellent interpersonal skills
• Excellent negotiating skills
• Ability to create and complete comprehensive, accurate and constructive written reports
• Ability to work in a team environment
• Ability to meet or exceed Performance Competencies

WORK ENVIRONMENT

When applicable and appropriate, consideration will be given to reasonable accommodations.

Mental: Clear and conceptual thinking ability; excellent judgment, troubleshooting, problem solving, analysis, and discretion; ability to handle work-related stress; ability to handle multiple priorities simultaneously; and ability to meet deadlines

Physical: Computer keyboarding, travel as required

Auditory/Visual: Hearing, vision and talking

The statements contained in this document are intended to describe the general nature and level of work being performed by a colleague assigned to this description. They are not intended to constitute a comprehensive list of functions, duties, or local variances. Management retains the discretion to add or to change the duties of the position at any time.