Lead Data Privacy Analyst

Stenn are looking for a Lead Data Privacy Analyst. Could this be you?

The Role:

We are seeking a highly skilled and experienced Lead Data Privacy Analyst to join our team. The ideal candidate will be responsible for ensuring the organization's compliance with data privacy regulations and maintaining the integrity and security of sensitive information. 

This role requires a proactive approach to building and maintaining a comprehensive data inventory, developing data dictionaries, translating compliance requirements, and driving their implementation across the organization. The Lead Data Privacy Analyst will also oversee the monitoring of operational activities, reporting on regulatory implementation, and managing data-related requests such as data subject requests (under GDPR and CCPA).

The ideal candidate will be comfortable working across functions and proactive in taking charge in ensuring compliance with EU GDPR, CCPA, and China’s Personal Information Protection Law (PIPL).

Key Responsibilities:

1. Proactively build and maintain a comprehensive data inventory with accurate data classification (i.e., ROPA).
2. Translate data-related compliance requirements into technical specifications and ensure their implementation across the organization.
3. Define data retention and classification policies, and drive their enforcement throughout the organization.
4. Oversee the internal implementation and monitoring of Role-Based Access Control (RBAC) to ensure appropriate data access and security.
5. Manage GDPR + CCPA requests processes, e.g. the right to be forgotten, and ensure timely and accurate responses.
6. Define and implement a Data Governance framework, with tangible and measurable goals. Track adherence to the framework.
7. Collaborate with data owners and data stewards to ensure alignment on data management practices and compliance requirements.
8. Conduct privacy reviews on new product changes and 3rd party vendors
9. Work closely with Legal, Security, and IT teams throughout the implementation process to ensure effective collaboration and comprehensive compliance with data privacy regulations.
10. Monitor operational activities/changes to ensure ongoing compliance with data privacy regulations.
11. Manage privacy incidents end-to-end, including detection, response, remediation, and reporting to relevant authorities.
12. Set the long-term vision and strategy for the data privacy function and define its quarterly goals and OKRs.

Qualifications:

• Bachelor's degree in Information Technology, Data Management, Privacy Law, or a related field.
• At least 5 years of experience in data privacy, data management, or a similar role.
• Proven track record of building a comprehensive data privacy and governance program from the ground up.
• In-depth knowledge of data privacy regulations, such as GDPR, and CCPA.
• Experience in handling privacy incidents and reporting to relevant authorities.
• Strong technical skills and experience with data inventory, classification, and mapping tools.