Associate Analyst, Privacy & Compliance
About the position The Associate Privacy & Compliance Specialist will support the various projects and initiatives of the Privacy & Compliance team to ensure compliance with data protection laws across multiple jurisdictions, including, the General Data Protection Regulation (GDPR) in Europe and U.S. state privacy laws such as the California Consumer Privacy Act (CCPA). Responsibilities • Assist in the creation, maintenance, and implementation of company data protection and privacy policies in accordance with regulations. • Create and maintain documentation of program elements and procedures that demonstrate compliance with regulations. • Assist with conducting Privacy Impact Assessments (PIAs) & Data Protection Impact Assessments (DPIAs) to evaluate the risks associated with new projects, products, or data processing activities; and follow up with business owners to monitor risk mitigation strategies. • Support the fulfillment of data subject and consumer rights requests (such as data access, deletion, correction, opt-out/do not sell, etc.), including logging requests, coordinating with IT and other business units, and ensuring timely responses. • Assist in the configuration of technology to support website cookie compliance, including banners, preference centers, geolocation rules, cookie lists, and accurate categorization of tracking tools and technologies. • Assist in vendor due diligence and risk assessments as part of the third-party risk management process, including the review of contracts, data processing agreements (DPAs), and security-related documentation. • Support education and training efforts related to Privacy and Compliance. • Support the incident response team in investigating, documenting, and responding to data breaches or suspected data privacy incidents. • May also support compliance efforts for other regulations and standards such as SOX, PCI-DSS, CT-PAT. • Develop skill proficiency through ongoing education, work assignments, research, and industry/user group participation. • Performs other duties as required/assigned by Manager. • Performs duties consistent with the company's AAP/EEO goals and policies. Requirements • Bachelor's degree in Law, Information Security, Information Systems, Business Administration, or equivalent experience. • 0-2 years of experience in privacy, data protection, compliance, or related fields, preferably in an international or multi-jurisdictional environment. • Excellent analytical and problem-solving skills. • Integrity and professionalism in handling confidential information. • Attention to detail and thoroughness in documentation and process adherence. • Proactive and self-motivated approach to staying current with regulatory changes and industry best practices. • Strong written and verbal communication skills. Apply tot his job