Staff Privacy Analyst - HYBRID

GEICO•Bethesda, MD

1d•$110,000 - $230,000•Hybrid

About The Position

GEICO is seeking an individual to administer operational privacy compliance across our organization in support of GEICO’s Data Privacy program and objectives. Works under the supervision of the Data Privacy Director, with latitude for the use of initiative and independent judgment based on experience. The ideal candidate is an experienced privacy professional with strong knowledge of data privacy frameworks and GRE tools, operational privacy risk management, and cross-functional stakeholder engagement.

Requirements

Must be able to, with or without accommodation, perform the essential functions which include, but are not limited to seeing, hearing, typing, and speaking.
Understanding of CCPA, GLBA, controller/processer applicability and high-level law/regulation obligations.
Ability to read and comprehend legal materials such as laws, regulations, and regulatory guidance.
Self-Starter with ability to manage and prioritize incoming work assignments based on prioritization and potential risk.
Strong understanding of data discovery process, data structure, data governance, and cybersecurity principles.
IAPP certification required.
Bachelor’s degree with focus on business administration, information system management, or related field is required.
7 plus years experience in supporting data privacy programs
2 years practical experience in Administration of OneTrust and similar privacy technologies including UI change management and workflow development within those tools.

Nice To Haves

Experience in a regulated financial services industry role is preferred.

Responsibilities

Drive Privacy Assessments program including collection of meaningful input from business/technical stakeholders and development of associated reporting that accurately identifies privacy risk and recommendations.
Administer and development of GRE tools.
Support data privacy incident response.
Support Data Subject rights requests.
Assist in development of notices, policies and procedures
Support regulatory change management including creation of operational privacy action plans and privacy by design requirements.