Privacy And Risk Analyst

Crawford & Company; Iloilo; On-site; PHP 250,000 - 420,000; Full time

Job summary

Crawford & Company is seeking a Privacy & Risk Analyst in the Philippines to provide administrative support to the Global Privacy Office and Third Party Risk Management. You will issue and review risk assessments, maintain data inventories and supplier records, and assist with privacy incidents and rights requests.

The role requires strong planning, organizational skills, and excellent written and verbal communication.

Qualifications

• Associate's degree in business, legal studies or related field.
• Three years of business/administration work experience.
• One year of experience working for a multi-national organization.
• Strong planning, organizational and prioritization skills.
• Excellent written and verbal communication skills.
• Working knowledge of Microsoft Word, Excel and PowerPoint.
• Strong attention to detail and accuracy.
• Strong customer service ethics and delivery.
• Ability to handle confidential and business sensitive information.
• Self-motivated and flexible.
• Knowledge of and interest in: Vendor management cycle, Information, IT and Cyber security, Data Privacy and security.

Responsibilities

• Intakes, classifies, and fields a variety of client enquiries related to privacy, data protection, and TPRM (third party risk management) matters including privacy and TPRM questionnaires/ Due diligence and RFI's.
• Issues and reviews privacy impact assessments on current and new activities, projects, and suppliers.
• Instrumental in the handling and management of privacy incidents and individual rights requests (data access, erasure, etc. through our privacy platforms.
• Completes and maintains data inventory on all business processes.
• Maintains the quarterly review process of subprocessors and client notifications.
• Maintains current list of suppliers with applicable risk-rankings.
• Ensures new suppliers are adequately documented and where appropriate, identifies whether new suppliers are replacing current suppliers in data inventory.
• Maintains risk register for both privacy and TPRM.
• Supports new vendor onboarding, risk reviews, and offboarding activities.
• Handles AP vendor risk enquiries.
• Works in software systems to maximize utilization.
• Other duties as assigned.
• Upholds the Crawford Code of Business.
• Upholds the Crawford Code of Business.

Job description

Job Description

The Privacy & Risk Analyst provides administrative support services to the Global Privacy Office team and the Third Party Risk Management. This role is responsible for issuing and reviewing risk assessments, completing and maintaining data inventories, and upkeep of supplier records.

Responsibilities

• Intakes, classifies, and fields a variety of client enquiries related to privacy, data protection, and TPRM (third party risk management) matters including privacy and TPRM questionnaires/ Due diligence and RFI's.
• Issues and reviews privacy impact assessments on current and new activities, projects, and suppliers.
• Instrumental in the handling and management of privacy incidents and individual rights requests (data access, erasure, etc. through our privacy platforms.
• Completes and maintains data inventory on all business processes.
• Maintains the quarterly review process of subprocessors and client notifications.
• Maintains current list of suppliers with applicable risk-rankings.
• Ensures new suppliers are adequately documented and where appropriate, identifies whether new suppliers are replacing current suppliers in data inventory.
• Maintains risk register for both privacy and TPRM.
• Supports new vendor onboarding, risk reviews, and offboarding activities.
• Handles AP vendor risk enquiries.
• Works in software systems to maximize utilization.
• Other duties as assigned.
• Upholds the Crawford Code of Business.
• Upholds the Crawford Code of Business.

Qualifications

• Associate's degree in business, legal studies or related field.
• Three years of business/administration work experience.
• One year of experience working for a multi-national organization.
• Strong planning, organizational and prioritization skills.
• Excellent written and verbal communication skills.
• Working knowledge of Microsoft Word, Excel and PowerPoint.
• Strong attention to detail and accuracy.
• Strong customer service ethics and delivery.
• Ability to handle confidential and business sensitive information.
• Self-motivated and flexible.
• Knowledge of and interest in:
• Vendor management cycle
• Information, IT and Cyber security
• Data Privacy and security