Compliance Manager - Privacy Offer

Parsons•New York City, NY

About The Position

Parsons is looking for a talented Compliance Manager - Privacy Offer to join our team! In this role you will oversee GDC’s Data Governance and Privacy Program, including the day-to-day management of program operations and the development, implementation, and maintenance of privacy policies and procedures. Reporting to the Chief and Deputy Chief Ethics and Compliance Officer (CECO), this role is also responsible for monitoring compliance, investigating and tracking privacy incidents and breaches, and ensuring adherence to applicable federal and state laws and regulations. Program background The Gateway Program is the most urgent infrastructure program in the country – a comprehensive set of rail investments that will improve commuter and intercity services, add needed resiliency and, in its later stages, create new capacity between Newark, New Jersey and New York City, the busiest section of the Northeast Corridor (NEC). The first phase of the Gateway Program includes the Hudson Tunnel Project (HTP), which includes the construction of a new two-track tunnel under the Hudson River connecting to Penn Station New York as well as the full rehabilitation of the existing 110-year-old North River Tunnel. The Gateway Development Commission (GDC), established through bi-state legislation, is responsible for the financing and development of the Hudson Tunnel Project.

Requirements

Juris Doctorate from an accredited law school or advance degree equivalent to meet the job’s requirements.
A minimum of eight (8) years of relevant experience in the data privacy sector.
A minimum of five (5) years of experience working on data governance and privacy issues under New Jersey and/or New York law.
A minimum of seven (7) years of experience in data privacy and governance in drafting policies, procedures, communications and training.
Demonstrated ability to work independently on projects of significant size and complexity, managing multiple projects and clients in a fast-paced environment, and working on a multi-disciplinary team.
Excellent negotiating, drafting, practice-management skills, and business judgment.
Excellent verbal and written communication skills.
Strong interpersonal, analytical, problem-solving, and organizational skills.
Confidence, professionalism, and tact in dealing with senior management and sophisticated third parties.
Proven capability to build and maintain strong client and peer relationships.
Ability to effectively supervise, support, and work collaboratively with other attorneys and staff.
Intellectual curiosity, team-oriented, self-starter mentality.
Proficiency in Microsoft Word, Microsoft Teams, Adobe, and related computer literacy skills.

Responsibilities

Establish and lead a data governance privacy program for GDC consistent with applicable laws.
Establish a data privacy audit program.
Undertake a comprehensive review of GDC’s data and privacy activities to ensure that they are consistent with industry’s best practices and our legal requirements.
Develop and manage an organizational policy development process that includes procedures that ensure GDC activities are consistent with its legal obligations.
Establish a process for receiving, documenting, tracking, investigating, and acting upon on all complaints concerning GDC’s privacy policies and procedures.
Work alongside management to establish a mechanism to track access to protected personal information, within the purview of GDC and as required by law and to allow qualified individuals to review or receive a report on such activity.
Provide leadership in the planning, design, and evaluation of privacy and security-related projects and activities.
Periodically revise the privacy program to address changes in laws, regulations, or company policy.
Provide privacy guidance to assist in the identification, implementation, and maintenance of GDC’s information policies and procedures.
Ensure new projects have a privacy review before implementation.
Coordinate with GDC’s Chief Ethics and Compliance Officer, GDC’s General Counsel, GDC’s Inspector General, GDC’s Head of Internal Audit, GDC’s Deputy Chief of Information Technology, and GDC’s vendors and Supporting or Executing Partners (e.g. NJ TRANSIT, Port Authority of New York and New Jersey, and Amtrak) to ensure compliance with privacy and data security obligations.
Work with GDC management, key departments, and committees to ensure the organization has and maintains appropriate privacy and confidentiality consent, authorization forms, and information notices and materials reflecting current organization and legal practices and requirements.
Coordinate with the appropriate regulating bodies to ensure that programs, policies, and procedures involving civil rights, civil liberties, and privacy considerations are addressed in an integrated and comprehensive manner.
Coordinate with regulatory and accrediting bodies as necessary.
Work with management to develop relationships with regulators and other government officials responsible for privacy and data security issues.
Ensure all processing and/or databases are registered with the local privacy/data protection Authorities, where required.
Work with business teams and senior management to ensure awareness of “best practices” on privacy and data security issues.
Work with organizational senior management to establish an organization-wide Data Governance/Privacy Committee.
Serve in a leadership role for Data Governance/Privacy Committee activities.
Interface with Senior Management to develop strategic plans for the collection, use, and sharing of information in a manner that maximizes its value while complying with applicable privacy regulations.
Coordinate with the Chief Ethics and Compliance Officer and GDC’s Deputy Chief of Information Technology for documenting and reporting self-disclosures of any evidence of privacy violations.
Work cooperatively with applicable organizational units in overseeing personal information access rights under applicable law.
Serve as the information privacy liaison for users of technology systems.
Assure that the use of technologies maintains and does not erode privacy protections on use, Collection, and disclosure of personal information.
Monitor systems development and operations for security and privacy compliance.
Conduct privacy impact assessments of proposed rules on the privacy of personal information, including the type of personal information collected and the number of people affected.