Data Privacy Analyst

Sedgwick•Telecommuter FL, FL

About The Position

By joining Sedgwick, you'll be part of something truly meaningful. It’s what our 33,000 colleagues do every day for people around the world who are facing the unexpected. We invite you to grow your career with us, experience our caring culture, and enjoy work-life balance. Here, there’s no limit to what you can achieve. Newsweek Recognizes Sedgwick as America’s Greatest Workplaces National Top Companies Certified as a Great Place to Work® Fortune Best Workplaces in Financial Services & Insurance PRIMARY PURPOSE: Ensures compliance with privacy laws and regulations with internal stakeholders, manages the full life cycle of Data Subject Access Requests (DSAR) requests, and responds to escalated privacy and breach incidents. ESSENTIAL FUNCTIONS and RESPONSIBILITIES Partners with Sedgwick business units to ensure compliance with applicable privacy laws and regulations. Analyzes escalated suspected privacy incidents reported to the privacy team to ensure appropriate and prompt response. Assists with escalated breach notification efforts including coordination with outside resources. Manages database(s) of privacy incidents and reporting. Keeps informed regarding pending privacy and industry laws, regulations, changes, trends, and best practices and assesses the potential impact of these changes on organizational processes and apprises Privacy team of relevant developments. Completes the full life cycle of Data Subject Access Requests (DSAR) requests. Ensures all DSARs are completed within agreed timeframes. Manages and maintains a DSAR log and produce reports and information summaries on DSARs. Liaises with internal stakeholders in matters relating to data breaches (including preparedness, prevention, impact mitigation and integral management of breaches) and DSARs (including information verification and request fulfillment). Completes other privacy-related tasks as assigned. ADDITIONAL FUNCTIONS and RESPONSIBILITIES Performs other duties as assigned.

Requirements

Bachelor's degree from an accredited college or university preferred.
Possession of relevant qualifications such as Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), or Certified Information Privacy Technologist (CIPT), or equivalent required.
Five (5) years of experience in privacy, compliance or a related field, or equivalent combination of education and experience required.
Solid understanding of privacy laws and regulations, including GDPR, CCPA, HIPAA, and other relevant laws and regulations
Experience in managing potential security incidents, including investigation and analysis
Experience in fulfilling DSAR requests
Ability to think strategically, assess risks and evaluate the potential consequences
Sufficient commercial awareness to understand, manage and navigate client expectations
Excellent communication skills, including the ability to communicate complex privacy concepts and communicate effectively with different stakeholders
Strong project management and leadership skills, with the ability to manage multiple projects and priorities simultaneously
Excellent working knowledge of Microsoft Outlook, Word, Excel, and online research tools and databases
Experience in implementing privacy policies, procedures, and controls.
Strong analytical and problem-solving skills
Ability to work independently and collaboratively as part of a team.
Willingness to learn and develop new skills
Strong attention to detail
Excellent oral and written communication skills, including presentation skills
PC literate, including Microsoft Office products
Analytical and interpretive skills
Strong organizational skills
Excellent interpersonal skills
Excellent negotiating skills
Ability to create and complete comprehensive, accurate and constructive written reports
Ability to work in a team environment
Ability to meet or exceed Performance Competencies

Nice To Haves

Working knowledge of OneTrust platform preferred.

Responsibilities

Partners with Sedgwick business units to ensure compliance with applicable privacy laws and regulations.
Analyzes escalated suspected privacy incidents reported to the privacy team to ensure appropriate and prompt response.
Assists with escalated breach notification efforts including coordination with outside resources.
Manages database(s) of privacy incidents and reporting.
Keeps informed regarding pending privacy and industry laws, regulations, changes, trends, and best practices and assesses the potential impact of these changes on organizational processes and apprises Privacy team of relevant developments.
Completes the full life cycle of Data Subject Access Requests (DSAR) requests.
Ensures all DSARs are completed within agreed timeframes.
Manages and maintains a DSAR log and produce reports and information summaries on DSARs.
Liaises with internal stakeholders in matters relating to data breaches (including preparedness, prevention, impact mitigation and integral management of breaches) and DSARs (including information verification and request fulfillment).
Completes other privacy-related tasks as assigned.
Performs other duties as assigned.