Sr. Privacy Compliance Analyst

Standard Insurance Company • Portland, OR

1d

About The Position

The Senior Privacy Compliance Analyst serves as the organization’s subject matter expert and point of contact for privacy incident response and handling. The role leads privacy incident intake, investigation, risk assessment, notification, and resolution, while monitoring evolving privacy and data protection requirements and translating regulatory obligations into practical business processes, guidance, and controls.

The analyst partners with legal, information security, IT, product, operations, claims, and service teams to ensure incidents are identified, escalated, investigated, contained, and remediated promptly and in compliance with applicable legal, regulatory, and contractual requirements. The role also supports audits and regulator inquiries, delivers training and guidance, and develops incident metrics and trend analyses to improve the privacy compliance program.

Requirements

• Bachelor’s degree or equivalent experience; business, legal, or a related field is preferred.
• 4–6+ years of experience in privacy, fraud, or information security.
• Demonstrated experience handling privacy and security incidents from intake through investigation, risk assessment, notification, and closure.
• Ability to translate complex regulations into practical guidance.
• Ability to manage complex work, assess risk, and meet deadlines in a detail-oriented, time-sensitive environment.
• Basic knowledge of federal and state privacy, data protection, and breach notification requirements.
• Excellent verbal and written communication skills and ability to build trust and effective partnerships with internal and external stakeholders.
• Ability to manage competing priorities, work autonomously, and exercise judgment and discretion in decisions, including time-sensitive incident situations.
• Strong analytical, critical-thinking, and problem-solving capabilities.
• Ability to partner cross-functionally to develop creative solutions that meet customer objectives while maintaining compliant processes and controls.

Nice To Haves

• Professional certifications in privacy, compliance, or security, such as CIPP/US, CIPM, CISSP, or similar.
• Experience coordinating incident response with information security, legal, and third-party vendors, including managing regulator inquiries following an incident.
• Experience developing playbooks, training materials, and compliance guidance.
• Business, legal, or related field of study.

Responsibilities

• Lead and coordinate the end-to-end response to privacy incidents, including intake, triage, investigation, containment, remediation, and closure.
• Escalate incidents to appropriate stakeholders and leadership, and maintain accurate incident records and reporting.
• Assess incident scope and risk and determine whether regulatory, contractual, or individual notification obligations apply under federal and state requirements.
• Draft and coordinate notifications to affected individuals, regulators, and business partners within required timeframes.
• Conduct root cause analyses, identify control gaps and trends, and recommend and track corrective and preventive actions to completion.
• Provide subject matter expertise and consultative guidance to business units, legal, and information security on incident handling and privacy compliance, including third-party vendor incidents.
• Research complex privacy questions using internal and external resources.
• Draft, update, maintain, and improve incident response policies, procedures, playbooks, job aids, training materials, and compliance guidance.
• Monitor, analyze, and interpret privacy, data protection, and breach notification laws and regulations, and communicate business implications to stakeholders.
• Participate in industry forums and meetings to monitor incident response trends and maintain productive relationships with industry contacts.
• Support internal audits, regulatory examinations, and regulator inquiries related to privacy incidents by organizing documentation, responding to inquiries, and assisting with corrective action plans.
• Deliver training, presentations, and guidance on incident reporting and response requirements and emerging regulatory trends.
• Develop and maintain privacy incident metrics, trend analyses, and reporting to identify recurring risks, evaluate response effectiveness, and support continuous improvement.
• Identify opportunities to strengthen privacy controls, operational procedures, and preventive measures based on incident findings, regulatory developments, and emerging privacy risks.

Benefits

• Medical, dental, and vision benefits.
• 401(k) plan with matching company contributions.
• Annual incentive bonus plan.
• Paid time off, including 11 holidays, 2 wellness days, and 8 volunteer hours annually; PTO increases with tenure.
• Paid parental leave.
• Adoption and surrogacy assistance.
• Employee giving program that double matches donations to eligible nonprofits and schools.
• Opportunities for career growth and advancement.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level