Overview
Pay rate: $140,000 to $157,000, depending on experience
This is a remote position.
The Director of Data Privacy and Compliance is a leadership roleresponsible for implementing and overseeingLSACs data privacy and compliance strategies. This role ensures LSAC adheres to global, regional andindustry specificdata protection regulations, mitigates privacy risks, and fosters a cultureof ethical data management practices.
ResponsibilitiesEssential Job Functions
Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of this position. The individual employed in this position will be required to:
- Work in close partnership with LSACs Office of General Counsel, and specifically, the Senior Counsel Privacy and Compliance, to develop data privacy and compliance strategies and initiatives.
- Drives organizational change through privacyinitiativeandprojectleadership of cross-functional teamscomprisedof internal Privacy Team resources,business unit personnel, andtechnical/ITteams.
- Guide andmaintaintheLSAC Privacy Roadmapthroughdefinition andownership ofitsunderpinning work program, working incollaboration with keystakeholders, particularly LSACs Officeof the General Counsel.
- Guide and support privacy management platformimplementation inlinewithPrivacy Roadmap priorities.
- Serve as Data Subject Access Rights (DSAR) process owner responsible foraccurateandtimelyfulfillment of DSAR requestssubmittedby LSACs range of customer types.
- Contribute to the formation and ongoing support of Data Governance data protection policies, procedures, and data handling practices.
- Oversee development andmaintenance ofdata inventoryto ensure adherence to privacy policies, standards, and regulations.
- Develop andmaintainLSACs Record of ProcessingActivities(ROPA) as alog ofhowLSACprocessespersonaldata.
- Regularlyconductcompany-widetraining campaigns to promotesound privacy practicesinto technical and business operations.
- Serve asback-end (IT)Records Management/Retentionprocessesownerassuringthatcustomer recordsaremaintainedin accordance withLSACRecords Management Policy.
- Identify, assess, and mitigate data protection risksacross LSAC data estate.
- Promote and deliver privacy tooling that meets internal and externalcustomer expectations through collaboration with analysts, software developers, engineer leads, product managers, and business stakeholders.
- Periodically prepare and present data privacyprogramand project status to senior management.
Competencies
- Strong written and verbal communication skills.
- Holds a strong sense of accountability for both individual and team objectives.
- Embraces a forward-thinking mindset, contributing to a culture of continuous improvement and creativity.
- Excellent time management, prioritization, attention to detail and organization skills
- Strong analytical, problem solving, anddecision-makingskills.
- Ability to manage cross-functional teams and drive organizational change.Candidate must have strong Project Management Skills
- Continually seek methods and techniques to improveways of working, particularly tooptimizeproductivity ofsurrounding teams.
- Excels atleadingteamsin an agile environment andovercoming professional challenges both personally and for involved teams.
QualificationsEducation and Experience
- B.A. or B.S. degree(M.S.preferred)and5+ years related experience.
- Minimum 3 years experience with recordsmanagementas itpertainsto retention and compliance requirements.
- Exposure to an implemented and operational data classification policy in support of tailored data protection measures.
- Experiencewith relationaland unstructured datadatabases such as Oracle,CosmoDB, AzureSQLand document file systems.
- Experience in the followingareasis stronglypreferred:
- IAPP Certifications (e.g., CIPP, CIPM, CIPT).
- Modern privacy platform implementation and operationsuch as withOneTrustand/or Microsoftdata management and privacy offerings.
- MS Azure (DevOps, Cloud Services, etc.)
- Industry mainstream relational database product administration and concepts (Oracel/OCI, SQL Server, Azure SQL).
- ContemporaryMicrosoft Azure data platform components.
- Experience in managing staff
- Experience in managing a Privacy & Compliance function
- Experience in applying bestCybersecurity practices for data protection and compliance
- Knowledge of inclusive design principles and digital accessibility standards.
Additional Information
Supervisory Responsibilities
This role does have people management responsibilities.
Position Type
The LSAC standard business hours are Monday-Friday, 8:30 a.m. - 4:45 p.m. ET. While these are the standard office hours for LSAC, as an exempt employee, the employee will be expected to work the hours necessary to satisfactorily complete their assignments in a responsible and professional manner.
Work Environment
This job operates in a remote and professional office environment. Whether remote or in-office, this role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.
Travel Requirements
There is no travel expected for this position.
Physical Demands
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee must regularlywrite, hear, read, and communicate effectively.
Additional Information:
Please note that this job description may not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Job responsibilities may change at any time with or without notice.
Except as otherwise provided by law, all terms of employment are subject on an at-will basis and can change at any time.
