Specialist, Data Privacy

Brother International Corporation • Bridgewater Township, NJ

2d • Hybrid

About The Position

The Specialist, Data Privacy is part of Brother’s Legal Department and administers the company’s data privacy program across the United States, Canada, and Latin America. The role is a trusted advisor to business stakeholders, translating legal requirements into practical processes and controls, identifying privacy risks and opportunities, and escalating legal issues to the supervising attorney.

The position maintains and improves the privacy framework and governance materials; coordinates privacy program implementation with regional data protection champions; monitors regulatory developments; supports Privacy by Design; and provides program metrics. It also manages DSAR workflows, leads privacy impact and risk assessments, administers the TrustArc platform and cookie consent program, and coordinates annual TRUSTe verification and Department of Commerce recertification for the EU-U.S. and Swiss-U.S. Data Privacy Frameworks.

Additional work includes drafting and maintaining policies and procedures, developing privacy training, supporting data inventories and records of processing, administering records retention, coordinating privacy projects and audits, and liaising with regional offices and advisory committees. The role is hybrid, with remote work permitted up to two days per week subject to business needs and manager-assigned office days. The targeted base salary is $95,000–$120,000 per year, and the position is eligible for a 5% target bonus, with potential for awards above target subject to company performance and applicable plans.

Requirements

• Bachelor’s degree or equivalent experience in Business, Law, Philosophy, IT, or a related field.
• At least 5 years of experience in data privacy, data protection, or information governance, including coordinating risk assessments, identifying control gaps, and proposing mitigation strategies.
• Experience managing DSARs, privacy assessments, and cookie consent management.
• At least 3 years of experience supporting Data Privacy Framework certification or verification.
• CIPP (Certified Information Privacy Professional) certification for the United States and/or Canada.
• Proficiency with Microsoft Office applications, including Outlook, Word, Excel, PowerPoint, and Teams.
• Experience with Microsoft Visio, Adobe Acrobat, SharePoint, TrustArc or a comparable privacy management platform, and cookie consent management tools.
• Ability to interpret regulatory requirements and translate them into actionable business and technical controls.
• Strong attention to detail in reviewing data flows, policies, and data classification documents.
• Strong analytical skills and ability to synthesize information from different sources to identify privacy issues and risks.
• Sound judgment and ability to recognize when to escalate legal issues to the supervising attorney.
• Strong ethics and integrity in handling sensitive data and privacy concerns.
• Project management and organizational skills, including managing multiple tasks and deadlines and prioritizing appropriately.
• Strong written and verbal communication skills and comfort communicating with senior business leaders.
• Ability to educate and train others on data privacy practices, policies, and legal requirements.
• Ability to collaborate and build relationships across all levels of the business.

Nice To Haves

• Spanish language skills.
• Portuguese language skills.

Responsibilities

• Maintain and continuously improve the company’s data privacy framework, including governance, policies, standards, procedures, and controls.
• Collaborate with Legal, Information Governance, regional leadership, and Cyber Security to oversee and manage the privacy program.
• Coordinate privacy program implementation with data protection champions across the United States, Canada, and Latin America.
• Monitor emerging privacy laws and regulations and, under the supervising attorney’s direction, lead projects to enhance compliance.
• Participate in internal design discussions to incorporate data protection requirements throughout new project development lifecycles.
• Provide current program metrics and reporting to Legal leadership and management.
• Administer DSAR workflows for the United States and Canada, including intake, identity verification, data collection, review, response, and closure within required timelines.
• Partner with IT, Legal, and regional business units to complete DSARs accurately, including redacting or anonymizing sensitive information.
• Escalate complex, sensitive, or disputed DSARs to the supervising attorney for legal review; maintain DSAR records and metrics; train stakeholders; and improve the workflow.
• Lead data privacy impact assessments and other privacy risk assessments for processing activities, systems, vendors, and strategic initiatives.
• Work with business units, IT, Cyber Security, and Legal to identify privacy risks; document findings and mitigations; track remediation; and communicate recommendations.
• Collaborate with third-party vendors and partners to confirm data privacy and protection obligations are met.
• Administer the TrustArc privacy management platform, including user access, assessments, workflows, documentation, tracking, and reporting.
• Coordinate annual TRUSTe verification for the EU-U.S. and Swiss-U.S. Data Privacy Frameworks, including questionnaires, privacy reviews, and action plans to address findings.
• Prepare and submit annual Department of Commerce DPF recertification following the supervising attorney’s review and approval; maintain supporting calendars, evidence, and records.
• Draft or amend internal data protection policies, guidelines, and procedures in consultation with the supervising attorney and stakeholders.
• Create supporting documents such as standard operating procedures, job aids, and forms consistent with company templates and guidelines.
• Respond to employee inquiries about privacy policies and procedures, escalating legal questions as appropriate.
• Develop and deliver privacy training and awareness content; manage course assignment, tracking, and completion reporting.
• Administer cookie consent management across company websites and digital properties, including consent banners and preference centers.
• Conduct and review cookie and tracker scans; classify cookies and similar technologies; and work with internal teams and vendors to remediate unclassified or non-compliant cookies and maintain accurate disclosures.
• Monitor regulatory developments affecting cookies and online tracking and recommend program updates to the supervising attorney.
• Support data inventory, data mapping, records of processing activities, and classification of personal and sensitive data.
• Administer the company’s records retention policy and schedule; help departments apply retention periods; and coordinate and track destruction of obsolete records.
• Review data flows, policies, and data classification documents to identify privacy practice gaps.
• Coordinate special privacy projects and liaise with United States, Canadian, and Latin American offices and advisory committees to support program implementation and improvement.
• Assist with audit requests requiring privacy information and privacy-program budget items, including timely invoice processing.
• Maintain knowledge of data privacy developments through professional organizations, conferences, and seminars.

Benefits

• Health insurance effective from day one of employment.
• Vision insurance effective from day one of employment.
• Dental insurance effective from day one of employment.
• 401(k) plan with employer matching up to 100% of the first 4% of employee contributions; employer matches vest immediately.
• Educational assistance program reimbursing up to 100% of qualifying tuition, lab fees, textbooks, and related expenses.
• Eligible for a 5% bonus at 100% of target, with the opportunity to achieve above target subject to company performance and applicable bonus plans.
• Hybrid work schedule allowing remote work up to two days per week, subject to business needs.
• Flexible Fridays.
• Facilitated courses and certificate programs, plus resources for self-paced learning.
• Casual dress code.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level