[Hiring] Technology Compliance & Privacy Analyst @Kastech Software Solutions Group

Role Description

This contractor will support the Privacy & Technology Compliance Program. It will be focused on identification and analysis of privacy and other technology compliance risks across the ecosystem including AI, Open-Source, Cloud/SaaS/SASE application architecture, and other related evolving areas of global regulatory attention. This position will also manage legal documentation related to Records of Processing Activity, Data Mapping and Data Governance, Service Provider documentation, and other similar requirements.

You will use a tactical approach to increase visibility of privacy and other data and technology-related compliance concerns to reduce risks while enabling business initiatives across the ecosystem. This includes facilitating conversations with business partners to understand their needs and goals, potential risks, and how we can find an effective solution.

The Analyst works cross-functionally with the business, DTS (IT), and enterprise functions to identify risk and opportunities for mitigation. You would serve as a trusted advisor to partners in DTS and the business, at all levels of the organization. Strong communications skills are key, with the ability to communicate complex issues in clear non-technical language. You should be able to influence key business partners, and drive consensus in complex stakeholder environments with multiple conflicting priorities.

Qualifications

• Minimum of three years' privacy, technology compliance or governance, or related work experience.
• Professional privacy certification such as CIPP strongly preferred. Other IT-related certifications, such as Security+, are a plus.
• Paralegal experience reviewing contractual terms and managing legal matters is a plus.
• Experience in Information Security, digital marketing and e-commerce, or other IT functions is a plus.
• Ability to communicate effectively in English including speaking, reading, and writing is required due to the global nature of this role. The ability to read, write, and speak in multiple languages is a plus.
• Willingness to work flexible global hours, including but not limited to significant portions of U.S. Central or Eastern time zone workdays.

Requirements

• Work cross-functionally with many teams across the business.
• Conduct privacy impact assessments/DPIAs of programs, systems, advertising and marketing campaigns, digital platforms and properties, and vendor and their services.
• Provide practical and easy to understand compliance guidance to partners throughout the organization, daily.
• Document Record of Processing Activities, data mapping, Service Provider, Controller-Processor DPAs, and other required forms of documentation for the Privacy & Technology Compliance Program globally.
• Understand and stay abreast of global privacy and technology legal requirements and be able to identify regulatory implications. This includes conducting research on new regulations, sanctions, or findings.
• Identify repetitive technology/privacy compliance questions and requests, and develop proactive ways to reduce the one-off requests, through training, guidelines, or other means.
• Maintain privacy-related notices, policies, standards, guidelines, and processes of the Privacy and Technology Compliance Program.
• Create and maintain compliance playbooks for business and DTS partner use.
• Analyze trends and systematic issues and prepare reports/dashboards for management.
• Assist digital and web teams in advising and tracking on privacy requirements.
• Develop both foundational and role-based privacy and technology compliance trainings for K-C employees and contractors.
• As needed, track, manage and fulfill Subject Access Requests and other privacy-related requests.
• Assist Privacy Counsel and Data Privacy Officer on contract auditing of technology compliance terms including privacy, security, and AI.

Company Description