Analyst, Privacy

Carnival Cruise Lines•Miami, FL

56d•Hybrid

About The Position

The Privacy Analyst - North America role is responsible for ensuring compliance with US and international privacy laws across the Carnival Corporation brands. The Privacy Analyst will support the Privacy Incidents Program, Data Subject Rights Program, and the Data Privacy Impact Assessment Program within the North America Privacy team. This role will work closely with business stakeholders across various departments including but not limited to marketing, communications, security, legal, front office teams, and audit to implement Privacy initiatives and procedures to improve and maintain compliance across the Company. Essential Functions: Monitor and enforce compliance with U.S. and international privacy laws across all Carnival Corporation brands, ensuring privacy policies and practices align with legal and regulatory requirements. Investigate and Document Privacy Incidents: Conduct fact-finding investigative reviews of privacy incidents, take appropriate follow-up actions, maintain thorough documentation, and draft incident reports in accordance with internal protocols and legal obligations. Administer the Data Subject Rights Program by coordinating and responding to requests (e.g., access, deletion, correction) from individuals regarding their personal data, ensuring timely and accurate fulfillment in compliance with applicable laws. Partner with internal teams—including marketing, communications, security, legal, front office, and audit—to implement privacy initiatives and procedures that enhance and sustain compliance across the organization. Contribute to the continuous improvement of the North America Privacy Program by identifying gaps, recommending enhancements, and supporting the implementation of privacy tools, training, and awareness initiatives. Maintain current knowledge of applicable state, federal, and international privacy laws and regulatory requirements. Aid in reporting Privacy metrics.

Requirements

2-5 years previous experience
Bachelor's degree in a field such as information technology, cybersecurity, business administration, or related field from an accredited university is required
Strong proficiency in understanding and fulfilling Privacy rights requests / DSR requests
Strong writing and communicative skills necessary for responding to customer facing inquiries as well as business stakeholders
Solid attention to detail and understanding of statutory time frames specific to compliance with applicable privacy laws, such as GDPR, CCPA, PIPEDA, Australian Privacy Act; LGPD; CAN-SPAM, etc.
Excellent verbal and written skills
Demonstrate strong organizational skills and ability to meet multiple, competing deadlines
Strong critical thinking skills with ability to make well-reasoned decisions
Ability to provide subject matter expertise on privacy-related matters to internal teams.
Proficiency in using Privacy-centric technology as well as corporate technology.
Strong project management skills.
Must be able to remain in a stationary position at a desk and/or computer for extended periods of time.
Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.

Nice To Haves

CIPP/US, CIPP/EU Certification is a plus.

Responsibilities

Monitor and enforce compliance with U.S. and international privacy laws across all Carnival Corporation brands, ensuring privacy policies and practices align with legal and regulatory requirements.
Investigate and Document Privacy Incidents: Conduct fact-finding investigative reviews of privacy incidents, take appropriate follow-up actions, maintain thorough documentation, and draft incident reports in accordance with internal protocols and legal obligations.
Administer the Data Subject Rights Program by coordinating and responding to requests (e.g., access, deletion, correction) from individuals regarding their personal data, ensuring timely and accurate fulfillment in compliance with applicable laws.
Partner with internal teams—including marketing, communications, security, legal, front office, and audit—to implement privacy initiatives and procedures that enhance and sustain compliance across the organization.
Contribute to the continuous improvement of the North America Privacy Program by identifying gaps, recommending enhancements, and supporting the implementation of privacy tools, training, and awareness initiatives.
Maintain current knowledge of applicable state, federal, and international privacy laws and regulatory requirements.
Aid in reporting Privacy metrics.

Benefits

All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan.
Director and above roles may also be eligible to participate in Carnival's discretionary equity incentive plan.
Health Benefits: Cost-effective medical, dental and vision plans
Employee Assistance Program and other mental health resources
Additional programs include company paid term life insurance and disability coverage
Financial Benefits: 401(k) plan that includes a company match
Employee Stock Purchase plan
Paid Time Off
Holidays - All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee's discretion.
Vacation Time - All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
Sick Time - All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
Personal and professional learning and development resources including tuition reimbursement
On-site Fitness center at our Miami campus