Privacy Analyst

OVERVIEW

The Privacy Analyst plays an active role in safeguarding personal information under Hubs custody and control and in demonstrating Hubs compliance with data protection laws and regulations. The work performed by the analyst under the supervision of the Sr. Privacy Counsel will help reduce Hubs privacy risks and build trust that Hubs handling of personal information complies with the law and consumers reasonable privacy expectations. Remote and Canada-based applicants are welcome.

KEY RESPONSIBILITIES

Privacy Impact Assessments:Conduct and assist in reviewing Privacy Impact Assessments (PIAs) to identify and mitigate potential privacy risks associated with projects data systems and activities that involve the processing of personal information across the business. Provide recommendations to minimize risks and promote a privacy-by-design culture among stakeholders.

Policy Development and Compliance:

Support the development implementation and regular review of Hubs privacy policies and procedures to ensure alignment with applicable data privacy laws (e.g. HIPAA GLBA PIPEDA state-level consumer privacy laws and GDPR)

Stay informed about changes in privacy regulations and identify areas in Hubs policies and procedures that must be updated for Hub to remain in legal compliance

Collaborate with stakeholders conducting compliance audits of privacy program activities

Reporting and Metrics:

Collect and analyze privacy program metrics to identify trends measure effectiveness and support Hubs continuous efforts to improve the privacy program.

Prepare and present to stakeholders on a regular basis reports on Hubs privacy-related work to comply with regulatory requirements.

Records of Processing Activities: Support data inventory and data mapping activities to ensure that Hub documents the types of personal information collected processing purposes storage locations recipients and retention periods.

Data Subject Access Rights (DSAR) Requests: Counsel stakeholders on how to handle privacy inquiries complaints and opt-out requests from consumers. Support efforts to automate and improve Hubs DSAR operations.

Training and Awareness:Assist in developing and delivering privacy training and awareness programs to help employees understand (a) their roles in protecting personal information (b) best practices when handing personal information and (c) data breach response procedures.

Vendor and Third-Party Management:Collaborate with Hubs risk management stakeholders in their due diligence investigations into whether to privacy-related policies and procedures of service providers and third parties align with Hubs privacy standards.

Collaboration and Counseling:Work closely with legal IT security marketing and other departments and business lines to ensure data protection measures are (a) aligned with Hubs privacy program guidelines and (b) effectively integrated into business processes and technology platforms. Provide advice on privacy best practice including areas where consumer rights and privacy practices intersect.

Manage Privacy Impacts of Security Incidents:Collaborate with incident response stakeholders and investigation of incidents involving personal information; create records outlining Hubs compliance with data breach notification and other privacy-related obligations for analysis by counsel (e.g. interviewing individuals involved in an incident to determine what data was impacted).

Administrative Tasks:Perform other administrative tasks as needed to support Hubs privacy program.

QUALIFICATIONS

• Certification: Certified Information Privacy Professional (CIPP) Certified Information Privacy Manager (CIPM) or Certified Information Systems Security Professional (CISSP) certifications are preferred.
• Experience: Four (4) years of experience in data privacy compliance or a related field. Experience in the insurance and financial sectors is welcome.
• Strong understanding of fair information practices as well as data privacy laws and regulations (e.g. HIPAA PIPEDA CCPA GDPR).
• Familiarity with data governance frameworks and privacy-enhancing technologies including data anonymization and pseudonymization techniques.
• Experience contributing to privacy impact assessments identifying potential privacy risks and making recommendations to minimize privacy risks.
• Familiarity with using privacy compliance management platforms (e.g. OneTrust Smartsheet).
• Strong communication and presentation skills including the ability to convey complex legal and technical concepts to diverse stakeholder groups across Hub.
• Attention to detail and a methodical approach to work.
• Ability to work independently and as part of a team.
• A commitment to ethical data practices and data privacy principles.

HUB International Limited is an equal opportunity employer that does not discriminate on the basis of race/ethnicity national origin religion age color sex sexual orientation gender identity disability or veterans status or any other characteristic protected by local state or federal laws rules or regulations.

E-Verify Program

We endeavor to make this website accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process please contact the recruiting team. This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.