[Hiring] Senior Privacy Compliance Analyst @The Standard

Role Description

The Senior Privacy Compliance Analyst serves as the subject matter expert and point of contact for privacy incident response and incident handling across the organization. This role leads the intake, investigation, risk assessment, notification, and resolution of privacy incidents, while monitoring and interpreting evolving privacy and data protection requirements and translating regulatory obligations into practical business processes, guidance, and controls.

This role partners with legal, information security, IT, product, operations, claims, and service teams to ensure privacy incidents are promptly identified, escalated, investigated, contained, and remediated in compliance with applicable legal, regulatory, and contractual requirements.

Key Responsibilities

• Incident Response & Management: Lead and coordinate the end-to-end response to privacy incidents, including intake, triage, investigation, containment, remediation, and closure. Ensure timely escalation to appropriate stakeholders and leadership and maintain accurate incident records and reporting.
• Incident Risk Assessment & Notification: Assess the scope and risk of incidents and determine whether they trigger regulatory, contractual, or individual notification obligations under applicable federal and state requirements. Draft and coordinate notifications to affected individuals, regulators, and business partners within required timeframes.
• Root Cause Analysis & Remediation: Conduct root cause analysis of incidents, identify control gaps and trends, and recommend and track corrective and preventive actions to completion in alignment with regulatory requirements.
• Business Partnership & Advisory: Provide subject matter expertise and consultative guidance to business units, legal, and information security on incident handling and privacy compliance, including incidents involving third-party vendors. Research complex questions using internal and external resources.
• Policy, Process, & Documentation Development: Draft, update, and maintain and improve incident response policies, procedures, playbooks, job aids, training materials, and compliance guidance to support consistent and compliant incident handling.
• Regulatory Monitoring & Industry Interaction: Monitor, analyze, and interpret privacy, data protection, and breach notification laws and regulations, and communicate business implications to stakeholders. Participate in industry forums and meetings to monitor incident response trends and develop and maintain productive working relationships with industry contacts.
• Audit & Regulatory Support: Support internal audits, regulatory examinations, and regulator inquiries related to privacy incidents by organizing documentation, responding to inquiries, and assisting with corrective action plans. Deliver training, presentations, and guidance on incident reporting and response requirements and emerging regulatory trends.
• Privacy Metrics, Reporting & Trend Analysis: Develop and maintain privacy incident metrics, trend analyses, and reporting to identify recurring risks, evaluate response effectiveness, and support continuous improvement of the privacy compliance program.
• Privacy Controls and Process Improvement: Identify opportunities to strengthen privacy controls, operational procedures, and preventive measures based on incident findings, regulatory developments, and emerging privacy risks.

Qualifications

• Bachelor’s degree or equivalent experience (business, legal, or related field preferred)
• Professional certifications in privacy, compliance, or security (e.g., CIPP/US, CIPM, CISSP, or similar) (preferred)
• 4–6+ years of privacy, fraud, information security experience
• Demonstrated experience handling privacy and security incidents from intake through investigation, risk assessment, notification, and closure
• Proven ability to manage complex work, assess risk, and meet deadlines in a detail-oriented, time-sensitive environment
• Basic knowledge of federal and state privacy, data protection, and breach notification requirements
• Experience coordinating incident response with information security, legal, and third-party vendors (preferred)
• Experience developing playbooks, training materials, and compliance guidance (preferred)

Key Behaviors of a Successful Candidate

• Winning Together: Excellent verbal and written communication skills with the ability to build trust and effective partnerships with both internal and external stakeholders. Fosters teamwork, maximizes efficiencies, and works to promote collaboration and delivery of exceptional customer experiences.
• Driving Success: Ability to manage competing priorities, work autonomously, and exercise judgement and discretion in making decisions, including in time-sensitive incident situations, to meet deadlines and stakeholder expectations.
• Customer Focus: Partner cross-functionally to provide creative solutions to meet customer objectives while maintaining compliant processes and controls.

Benefits

• A rich benefits package including medical, dental, vision and a 401(k) plan with matching company contributions
• An annual incentive bonus plan
• Generous paid time off including 11 holidays, 2 wellness days, and 8 volunteer hours annually — PTO increases with tenure
• A supportive, responsive management approach and opportunities for career growth and advancement
• Paid parental leave and adoption/surrogacy assistance
• An employee giving program that double matches your donations to eligible nonprofits and schools