Data Protection and Privacy Specialist

DTCC • Jersey City, NJ

18h • Hybrid

About The Position

As a member of the Data Protection and Technology Services team, the Data Protection and Privacy Specialist supports the Privacy Office in ensuring the client and its companies comply with applicable regulatory and legal data protection and privacy requirements. The role supports all business lines and functional areas globally. This is a six-month contract with a possible extension, based in Jersey, with a preference for hybrid work.

Requirements

• A minimum of 3–4 years of related experience.
• Relevant experience in areas such as data privacy, audit, information security, or risk management.

Nice To Haves

• Bachelor’s degree preferred, or equivalent experience.
• Relevant industry certification, such as CIPM, CIPP EU/A/C/US, or CISSP.

Responsibilities

• Keep abreast of global data privacy laws and regulatory requirements applicable to the client and its companies.
• Conduct the annual privacy inventory of data and processing activities, including performing privacy impact assessments (PIAs) and data protection impact assessments (DPIAs).
• Manage and respond to inquiries received in the privacy mailbox, providing consultation and guidance or escalating as needed.
• Conduct privacy vendor evaluations to assess regulatory and privacy risks and practices associated with onboarding third parties.
• Work with business lines to identify privacy risks and determine appropriate controls for new projects, cloud hosting initiatives, and special projects.
• Draft and maintain privacy policies, procedures, and guidelines.
• Assist other business lines with policies that may affect individual privacy, such as employee handbooks, technology usage policies, and social media policies.
• Assist with reviewing changes to applicable laws and regulations and interpreting their impact on the client and its companies.
• Assist with annual privacy training and ongoing awareness programs.
• Assist with procedures for addressing Data Subject Access Requests.
• Assist with the annual review of monitoring policies intended to prevent the loss of personal data and data leakage.
• Integrate risk and control processes into day-to-day responsibilities to monitor and mitigate risk, escalating issues appropriately.
• Stay current on evolving technologies, including AI, and their risks and impact on data protection.
• Assist with data breach investigations, management reporting, and trend analysis affecting data privacy or client confidentiality.
• Support other daily program elements as needed.

What This Job Offers

• Career Level: Mid Level