Privacy & Risk Analyst

Crawford and Company; Iloilo City; On-site; PHP 420,000 - 640,000; Full time

Job summary

Crawford & Company is seeking a Privacy & Risk Analyst to support the Global Privacy Office and Third Party Risk Management. The role focuses on risk assessments, data inventories, supplier records, and incident handling.

The ideal candidate has an Associate's degree and 3+ years of business experience, with strong communication, organizational, and data privacy knowledge. This position emphasizes confidentiality and cross-border vendor management.

Qualifications

• Associate's degree in business, legal studies or related field.
• Three years of business/administration work experience.
• One year of experience working for a multi-national organization.
• Strong planning, organizational and prioritization skills.
• Excellent written and verbal communication skills.
• Working knowledge of Microsoft Word, Excel and PowerPoint.
• Strong attention to detail and accuracy.
• Strong customer service ethics and delivery.
• Ability to handle confidential and business sensitive information.
• Self-motivated and flexible.
• Knowledge of and interest in: Vendor management cycle, Information, IT and Cyber security, Data Privacy and security.

Responsibilities

• Intakes, classifies, and fields client enquiries related to privacy, data protection, and TPRM matters.
• Issues and reviews privacy impact assessments on activities, projects, and suppliers.
• Handles privacy incidents and individual rights requests via privacy platforms.
• Completes and maintains data inventories for business processes.
• Maintains quarterly subprocessors and client notifications in the review process.
• Maintains current supplier lists with risk-rankings.
• Documents supplier changes and replacements in data inventory.
• Maintains privacy and TPRM risk registers.
• Supports vendor onboarding, risk reviews, and offboarding activities.
• Handles AP vendor risk enquiries.
• Uses software systems to maximize utilization.
• Performs other duties and upholds Crawford Code of Business Conduct.

Skills

Organizational skills

Communication skills

Attention to detail

Confidential information handling

Self-motivated and flexible

Customer service ethics

Vendor management knowledge

Data privacy awareness

Education

Associate's degree in business, legal studies or related field

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Job description

Job Description

The Privacy & Risk Analyst provides administrative support services to the Global Privacy Office team and the Third Party Risk Management. This role is responsible for issuing and reviewing risk assessments, completing and maintaining data inventories, and upkeep of supplier records.

Responsibilities

• Intakes, classifies, and fields a variety of client enquiries related to privacy, data protection, and TPRM (third party risk management) matters including privacy and TPRM questionnaires/ Due diligence and RFI's.
• Issues and reviews privacy impact assessments on current and new activities, projects, and suppliers.
• Instrumental in the handling and management of privacy incidents and individual rights requests (data access, erasure, etc. through our privacy platforms.
• Completes and maintains data inventory on all business processes.
• Maintains the quarterly review process of subprocessors and client notifications.
• Maintains current list of suppliers with applicable risk-rankings.
• Ensures new suppliers are adequately documented and where appropriate, identifies whether new suppliers are replacing current suppliers in data inventory.
• Maintains risk register for both privacy and TPRM.
• Supports new vendor onboarding, risk reviews, and offboarding activities.
• Handles AP vendor risk enquiries.
• Works in software systems to maximize utilization.
• Other duties as assigned.
• Upholds the Crawford Code of Business Conduct.
• Upholds the Crawford Code of Business.

Qualifications

• Associate's degree in business, legal studies or related field.
• Three years of business/administration work experience.
• One year of experience working for a multi-national organization.
• Strong planning, organizational and prioritization skills.
• Excellent written and verbal communication skills.
• Working knowledge of Microsoft Word, Excel and PowerPoint.
• Strong attention to detail and accuracy.
• Strong customer service ethics and delivery.
• Ability to handle confidential and business sensitive information.
• Self-motivated and flexible.
• Knowledge of and interest in:
  • Vendor management cycle
  • Information, IT and Cyber security
  • Data Privacy and security