a. Works as part of the Privacy/Legal Team providing support on data disclosure and other security incidents ensuring that requisite teams are engaged on an incident and following up where necessary to ensure that all appropriate steps are followed. Role includes intake and triage written analysis and end-to-end coordination and management of reported security incidents throughout the life cycle of an incident investigation.
Provide support for the incident process including written analysis and escalation of incidents where a response is required within a specified timeframe;
Communicate in writing complex ideas in a way that is easy to understand.
Produce periodic and ad-hoc reports for the use of the team.
Research and apply privacy laws and regulations to investigation outcomes and make recommendations; and track and identify privacy/legal impact to WTW.
Responsibility:
Receive and provide triage reports for security incidents from across the business including:
Making a record of the incident and undertake triage
Review and confirm facts of an incident to isolate what may be missing or misstated
Isolate key clauses in contracts to identify legal obligations
Coordinate with the Legal lead of the incident as well as engagement of any other known stakeholders
Provide timely escalation of severe incidents or non-compliance to agreed service level agreement (SLA) for incident progression
Identify underlying trends through the production of reports and potential control gaps
Ensure all incident handling and response best practices guidelines and standards are followed
Ensure accurate and clear communication with stakeholders including through direct and clear written communication
Ensure the timely production of reports for the team
Qualifications
Demonstrable track record of:
Working with other teams and disciplines towards a common goal
A developing knowledge and enthusiasm for Legal and Privacy subject matters
Problem solving and maintaining SLAs
Working to deadlines and maintaining a high degree of organization to your work
Highly computer literate
Communicating clearly
Experience with business and legal writing.
Beneficial qualifications include:
Law degree or BSc with law component or equivalent qualification
Beneficial but not essential:
An understanding of cyber security
An understanding of privacy regulations (e.g. GDPR HIPAA and other U.S. and global privacy laws) Privacy certification(s)
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.