Senior Privacy Analyst

Contract Opportunity with 90-Year Old Global Investment Firm

• Coordinate and manage programs of transition of the privacy operating model for the HR and Finance businesses globally
• Identify evolving privacy requirements and risks inherent in operations (products and services)
• Assist in privacy compliance reviews, including relating to third-parties where applicable
• Assist with the design and implementation of company-wide privacy policies, processes, and procedures
• Assist business functions with the design of function-level privacy processes, procedures, and controls
• Support maintenance (by data owners) of an inventory of personal data processing. Educate the data owners on their responsibilities (what is personal data, how is it used, who has access to it, documentation required, etc.)
• Support staff and project management on conducting Privacy Impact Assessments including privacy risk analysis and mitigation
• Assist with investigations into privacy incidents, breaches and complaints
• Other duties as assigned

• At least 5 years of experience in the privacy discipline
• Understanding of the financial services industry (digital wealth preferred)
• Building and managing relationships at various levels of the organization
• Working in large / global corporate environments involving multiple businesses
• Strong understanding of audit/risk management methodologies and regulatory requirements pertaining to privacy and/or data security
• Demonstrable knowledge and understanding of global privacy legislation (e.g. GDPR, UK GDPR, CCPA, GLBA, PIPEDA, notice of breach laws, etc.)
• Experience using and configuring OneTrust, or similar enterprise privacy management systems
• Experience on privacy considerations of software development, cloud platforms, enterprise data lakes or similar.
• Demonstrable ability to translate privacy and/or security regulations and/or standards into workable and implementable solutions
• Risk identification, assessment, response and mitigation planning, and reporting
• Project management experience
• Collation of material for reporting (including developing relevant metrics)
• Knowledge
• Strong communicator and presenter (written and verbal, including to large or formal audiences)
• Ability to translate complex/technical topics into business language and to articulate points in terms widely understood
• Strong analysis and assessment skills to evaluate risks and recommend action based on fact
• Strong conceptual thinking and communication skills - the ability to conceptualize complex business and technical requirements into comprehensible models and templates
• Collaborative style to engage effectively with all personalities and across functional disciplines and to build strong working relationships
• Ability to plan and deliver projects
• Degree in Information Security, Privacy, Legal, Management Information Systems, or Computer Science is preferred or commensurate relevant work experience.
• Other Personal Attributes Required
• To have, or to be working towards, certification in privacy and/or security (e.g. CIPP/E, CIPP/US, CIPM, CISM, CISSP or equivalent)
• Experience of working on HR or Finance platforms, such as Workday or Oracle Financials, is a strong plus