Privacy And Risk Analyst

Crawford & Company; Iloilo; On-site; PHP 300,000 - 540,000; Full time

Job summary

Crawford & Company is seeking a Privacy & Risk Analyst to provide administrative support to the Global Privacy Office and Third Party Risk Management. The role involves issuing and reviewing risk assessments, maintaining data inventories, and ensuring supplier records are up to date.

The ideal candidate will have an Associate's degree in business or legal studies, at least three years of relevant experience, and strong communication skills.

Qualifications

• Associate's degree or equivalent in business, legal studies or related field required.
• Three years of business/administration work experience.
• One year of experience in a multinational organization.
• Strong planning, organizational and prioritization skills.
• Excellent written and verbal communication skills.
• Working knowledge of Microsoft Word, Excel and PowerPoint.
• Strong attention to detail and accuracy.
• Strong customer service ethics and delivery.
• Ability to handle confidential and sensitive information.

Responsibilities

• Intakes, classifies, and fields client enquiries related to privacy, data protection, and Third Party Risk Management (TPRM).
• Issues and reviews privacy impact assessments on activities, projects, and suppliers.
• Handle privacy incidents and individual rights requests (data access, erasure) through privacy platforms.
• Completes and maintains data inventory on all business processes.
• Maintains quarterly review process of subprocessors and client notifications.
• Maintains current list of suppliers with risk rankings.
• Documents new suppliers and identifies replacements in data inventory.
• Maintains risk register for privacy and TPRM.
• Supports vendor onboarding, risk reviews, and offboarding activities.
• Handles AP vendor risk enquiries.
• Works in software systems to maximize utilization.
• Upholds the Crawford Code of Business Conduct.

Skills

Planning

Organization

Prioritization

Written communication

Verbal communication

Customer service

Attention to detail

Self-motivation

Flexibility

Vendor management

Privacy & security interest

Education

Associate's degree in business/legal studies

Tools

Microsoft Word

Excel

PowerPoint

Job description

Job Description

The Privacy & Risk Analyst provides administrative support services to the Global Privacy Office team and the Third Party Risk Management. This role is responsible for issuing and reviewing risk assessments, completing and maintaining data inventories, and upkeep of supplier records.

Responsibilities

• Intakes, classifies, and fields a variety of client enquiries related to privacy, data protection, and TPRM (third party risk management) matters including privacy and TPRM questionnaires/ Due diligence and RFI's.
• Issues and reviews privacy impact assessments on current and new activities, projects, and suppliers.
• Instrumental in the handling and management of privacy incidents and individual rights requests (data access, erasure, etc. through our privacy platforms.
• Completes and maintains data inventory on all business processes.
• Maintains the quarterly review process of subprocessors and client notifications.
• Maintains current list of suppliers with applicable risk-rankings.
• Ensures new suppliers are adequately documented and where appropriate, identifies whether new suppliers are replacing current suppliers in data inventory.
• Maintains risk register for both privacy and TPRM.
• Supports new vendor onboarding, risk reviews, and offboarding activities.
• Handles AP vendor risk enquiries.
• Works in software systems to maximize utilization.
• Other duties as assigned.
• Upholds the Crawford Code of Business Conduct.
• Upholds the Crawford Code of Business.

Qualifications

• Associate's degree in business, legal studies or related field.
• Three years of business/administration work experience.
• One year of experience working for a multi-national organization.
• Strong planning, organizational and prioritization skills.
• Excellent written and verbal communication skills.
• Working knowledge of Microsoft Word, Excel and PowerPoint.
• Strong attention to detail and accuracy.
• Strong customer service ethics and delivery.
• Ability to handle confidential and business sensitive information.
• Self-motivated and flexible.
• Knowledge of and interest in:
• Vendor management cycle
• Information, IT and Cyber security
• Data Privacy and security