Data Governance and Compliance Analyst

Data Governance and Compliance Analyst

Remote

Job Description

The Enterprise Data Governance (EDG) team partners with the business privacy legal and data protection teams to manage data risk and create a robust security control environment.

The immediate priority for EDG is to maintain a comprehensive data inventory that includes critical data and records of the organizations data processing activities (ROPA) and supporting privacy operations on privacy risk mitigation activities.

This position supports privacy domain capabilities executes activities that drive continuous compliance and operationalizes privacyrelated processes within EDG and with other stakeholders. The aim is to assist with process controls and participate in design enhancements and testing of the solution that integrates the Data Governance platform with risk governance and compliance platform capabilities.

The ideal candidate will have a wellrounded background in Data or Information Risk Governance or Compliance preferably in privacy governance/data governance with an understanding of Data Privacy Frameworks such as the NIST Privacy Framework.

• Understand assigned business functions data domains capabilities underlying business processes and the criteria for identifying highrisk ones.
• Maintain Record of Processing Activities (ROPA) / Data Processing Inventory and corresponding maintenance process.
• Engage with business and technology stakeholders to understand and consider business processes with specific data analytics and AI requirements while implementing records retention destruction processes and workflows.
• Collaborate with business and technology stakeholders to support Privacy by Design (PbD) procedures and privacy risk assessment activities.
• Support the process and solution created to connect enduserdriven critical data information types with the granular data inventory maintained by EDG.
• Coordinate with the MCD Privacy Legal and Data Protection team to capture and share privacy controlrelated requirements.
• Support domain councils and EDG domain stewards as privacy experts to address questions about privacy control requirements.
• Support EDG change adoption and enterprise Learning & Development team to develop align and maintain content for data and privacy rolespecific training.
• Support Enterprise Risk Management (ERM) related activities by tracking and capturing EDGowned risk and its mitigation summary within the Governance Risk Compliance (GRC) platform.
• Bachelors degree preferably in Business Administration Management Information systems or equivalent experience.
• At least 5 7 years of work experience in large complex programs and projects within business functions such as Marketing CRM Finance and HR.
• 3 5 years experience supporting privacy or data or information governance.
• At least 3 years experience in applying relevant frameworks and principles for privacy or data or information governance.
• Knowledge of privacy data protection information technology governance standards procedures and policies.
• Analyzing requirements workflows and ability to assimilate knowledge of processes frameworks and technologies quickly.
• Experience in the use of data governance platform such as Collibra governance risk and compliance (GRC) software such as OneTrust RSA Security Archer or ServiceNow Integrated Risk Management
• Prefer experience from risk management consulting practice where expertdriven consulting services were performed.
• Having a working knowledge of software systems including enterprise systems databases infrastructure networks and other written and verbal communication skills within different domains is essential.
• Strong interpersonal written and verbal communication skills in English with the ability to communicate clearly and concisely across organizational levels and build effective working relationships.