Privacy & Risk Analyst

Crawco; Iloilo; On-site; PHP 500,000 - 750,000; Full time

Job summary

Crawco in the Philippines (Iloilo) is seeking a Privacy & Risk Analyst to support the Global Privacy Office and Third Party Risk Management. You will issue and review risk assessments, maintain data inventories, and ensure supplier records are up to date, enabling strong data protection across the organization.

The role requires coordinating privacy incident handling, individual rights requests, and ongoing risk registers while collaborating with cross-functional teams and leveraging privacy

Qualifications

• Must have strong planning and organizational skills.
• Excellent written and verbal communication abilities.
• Demonstrated attention to detail and accuracy.
• Strong customer service ethics and professional delivery.
• Ability to handle confidential and sensitive information.

Responsibilities

• Provide admin support to Global Privacy Office and Third Party Risk Management.
• Issue and review risk assessments and data inventories.
• Maintain supplier records and quarterly subprocessor reviews.
• Handle privacy incidents and individual rights requests via privacy platforms.
• Assist in vendor onboarding, risk reviews, and offboarding activities.

Skills

Strong planning and prioritization

Excellent written and verbal comunicat

Strong attention to detail

Strong customer service ethics and del

Ability to handle confidential inform

Education

Associate's degree in business, legal studies or related field

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Job description

• Nurse License Not Applicable

Job Description

The Privacy & Risk Analyst provides administrative support services to the Global Privacy Office team and the Third Party Risk Management. This role is responsible for issuing and reviewing risk assessments, completing and maintaining data inventories, and upkeep of supplier records.

Responsibilities

• Intakes, classifies, and fields a variety of client enquiries related to privacy, data protection, and TPRM (third party risk management) matters including privacy and TPRM questionnaires/ Due diligence and RFI's.
• Issues and reviews privacy impact assessments on current and new activities, projects, and suppliers.
• Instrumental in the handling and management of privacy incidents and individual rights requests (data access, erasure, etc. through our privacy platforms.
• Completes and maintains data inventory on all business processes.
• Maintains the quarterly review process of subprocessors and client notifications.
• Maintains current list of suppliers with applicable risk-rankings.
• Ensures new suppliers are adequately documented and where appropriate, identifies whether new suppliers are replacing current suppliers in data inventory.
• Maintains risk register for both privacy and TPRM.
• Supports new vendor onboarding, risk reviews, and offboarding activities.
• Works in software systems to maximize utilization.
• Other duties as assigned.
• Upholds the Crawford Code of Business Conduct.
• Upholds the Crawford Code of Business.

Qualifications

• Associate's degree in business, legal studies or related field.
• Three years of business/administration work experience.
• One year of experience working for a multi-national organization.
• Strong planning, organizational and prioritization skills.
• Excellent written and verbal communication skills.
• Working knowledge of Microsoft Word, Excel and PowerPoint.
• Strong attention to detail and accuracy.
• Strong customer service ethics and delivery.
• Ability to handle confidential and business sensitive information.