Data Protection Officer

Title:

Company:

Job Category:

Job Description:

About Everest:
Everest is a global leader in risk management rooted in a rich 50 year heritage of enabling businesses to survive and thrive and economies to function and flourish. We are underwriters of risk growth progress and opportunity. We are a global team focused on disciplined capital allocation and long-term value creation for all stakeholders who care deeply about our impact on communities and the wider world.

About the Role:

As the Data Protection Officer you will play a critical role in developing implementing and overseeing our data privacy and protection initiatives. You will collaborate closely with cross-functional teams especially within our international locations to ensure that our data handling practices comply with relevant regulations and industry best practices while fostering a culture of data privacy throughout the organization. The DPO will oversee compliance with local data protection laws including GDPR to ensure that data protection controls are regularly tested monitored evidenced and enforced. This role will ensure that the risks to the rights and freedoms of data subjects associated with collection and processing of Personally Identifiable Information by European and UK operations of the company are regularly assessed and are minimized.

Responsibilities:

• Act in and fulfill the role of the Data Protection Officer for our international entities.
• Serve as registered point of contact for the data protection authorities acting as the first point of contact for all inquiries.
• Oversee the development and implementation of data privacy and protection policies procedures and guidelines globally and in alignment with applicable laws and regulations (e.g. GDPR CCPA HIPAA).
• Monitor and assess data processing activities to ensure compliance with privacy laws and contractual obligations including data transfer mechanisms and third-party data sharing agreements.
• Conduct regular Privacy Impact Assessments (PIAs) or Data Protection Impact Assessments (DPIAs) to identify and mitigate potential privacy risks associated with new or existing projects.
• Ensure that data subject requests such as data access correction or deletion for individuals whose data is processed (EU and UK: employees customers etc.) are managed and responded to within the required timeframe.
• Oversee and advise on the implementation of data classification data mapping and flows privacy and protection and data retention controls and procedures.
• Oversee and advise on incident response efforts in the event of a data breach including coordination with internal and external stakeholders timely notification and remediation.
• Monitor controls associated with the management retention and disposal of records are maintained.
• Report quarterly to Everests international boards regarding data privacy and protection compliance control health and risk remediation activities.
• Collaborate with legal IT and other departments to ensure that data privacy considerations are embedded in data processing activities system design AI initiatives and data handling procedures.
• Provide guidance and training to employees on data protection regulations and best practices to enhance overall awareness and compliance.
• Establish and maintain records of data processing activities including data inventories data flows and data retention schedules.
• Monitor emerging trends and changes in data privacy regulations to ensure continuous alignment of policies and practices with evolving requirements.
  

Qualifications:

• Bachelors degree in Law Information Technology Cybersecurity or a related field.
• Professional certifications such as Certified Information Privacy Professional (CIPP) or equivalent are highly desirable.
• 5 years of experience in data privacy and protection with a strong understanding of relevant regulations and industry standards.
• Experience acting as the Data Protection Officer and interfacing with data protection authorities.
• Knowledge of U.S. and international data protection laws and regulations (e.g. GDPR CCPA) and their implications on data handling practices.
• Excellent communication skills with the ability to convey complex data privacy concepts to both technical and non-technical audiences.
• Strong analytical and problem-solving abilities with a keen attention to detail.
• Experience conducting privacy impact assessments and managing data subject requests.
• Ability to work independently manage multiple projects and collaborate effectively across teams.
• Demonstrated commitment to staying current with developments in data privacy and protection.

What if I dont meet every requirement At Everest we are dedicated to building an inclusive and authentic workplace. So if you are excited about this role but your past experience doesnt align perfectly with every element in the job description we still encourage you to apply. You may be just the right candidate for this or other roles. Please let us know if you need any accommodations throughout the application or interview process.

Our Culture

At Everest our purpose is to provide the world with protection. We help clients and businesses thrive fuel global economies and create sustainable value for our colleagues shareholders and the communities that we serve. We also pride ourselves on having a unique and inclusive culture which is driven by a unified set of values and behaviors. Clickhereto learn more about our culture.

• Our Valuesare the guiding principles that inform our decisions actions and behaviors. They are an expression of our culture and an integral part of how we work: Talent. Thoughtful assumption of risk. Execution. Efficiency. Humility. Leadership. Collaboration. Inclusion and Belonging.
• Our Colleague Behaviorsdefine how we operate and interact with each other no matter our location level or function: Respect everyone. Pursue better. Lead by example. Own our outcomes. Win together.

All colleagues are held accountable to upholding and supporting our values and behaviors across the company. This includes day to day interactions with fellow colleagues and the global communities we serve.

Type:

Time Type:

Primary Location:

Additional Locations: