Privacy Manager

CareAbout•Cypress, CA

2d•Hybrid

About The Position

Reporting to the VP, IT, the Privacy Manager plays a vital role in keeping the organization’s proprietary and sensitive information secure. You will work inter-departmentally to create, identify and correct flaws in the company’s privacy program and practices, as well as being key in the company’s security program and certification objectives. The Privacy Manager is responsible for ensuring the company’s sensitive information is protected from unauthorized access and to ensure the appropriate controls and processes are in place. This includes both online and on-premises infrastructures. The primary functions are to develop and manage the privacy and data protection strategy, and to be responsible for supporting privacy governance, specifically related to applicable privacy regulations (including GDPR, CCPR/CCPA, Quebec Law 25, etc).

Requirements

Bachelor’s Degree or at least 5 years equivalent work experience in a similar role
Certification by IAPP or other recognized certification body
Very good knowledge of GDPR (UK GDPR is also fine), Quebec law 25, CCPR/CCPA and other related laws as may be applicable
Knowledge of technical computer solutions and challenges
Current knowledge of the main Privacy regulations
Experience with the implementation of a privacy program
Previous Audit experience
Ability to travel to various sites (approx. 20%)
Excellent communication skills, both verbal and written
Ability to interact with business partners at all levels of the organization to collect and document integration requirements
Excellent customer service and ability to work collaboratively with others
Excellent analytical and problem-solving skills
Keen eye for detail and organization
Ability to work effectively and independently in geographically dispersed cross-functional teams
Eager and enthusiastic to learn and adopt new skills

Responsibilities

Conduct Privacy audits to determine current state and required actions (gap analysis)
Perform Privacy Impact Assessments as required
Assess and analyze privacy requirements, current state environment and technology platforms to define and propose solutions both administrative and technical to meet our Privacy obligations
Improve, and where needed, create our Privacy Program
Maintain the Privacy Register
Liaison with external Sponsor and Providers on Privacy matters
Maintain and update or create any required Privacy Policies and procedures
Conduct Privacy internal audits
Maintain a current knowledge of privacy laws and regulations
Work with IT to implement technical solutions (eg., Data loss Prevention, etc)
Work with the business to improve Privacy practices
Provide guidance to other departments (esp. Marketing) on privacy obligations and regulations