Data Privacy Manager

Enstar Group; United States; On-site; USD 105,000 - 145,000; Full time

Benefits offered by this job

Medical, Dental, and Vision healthcare

401K retirement plan

Wellness Reimbursement program

Job summary

Enstar Group is seeking a Data Privacy Manager to lead the development and enforcement of privacy policies and practices across the US. This role requires a minimum of 4-6 years of data privacy experience along with expertise in US privacy law and the ability to manage complex regulatory requirements. The Data Privacy Manager will also champion privacy awareness among employees and manage data subject rights processes for compliance. The position offers a salary range of $105,000-$145,000 based on experience, along with comprehensive benefits.

Qualifications

• 4-6 years of hands-on data privacy experience in financial services or insurance.
• Expertise in US privacy law (e.g., GLBA, CCPA/CPRA).
• Experience managing data subject rights programmes and incidents.

Responsibilities

• Support maintaining compliance with data protection legislation.
• Manage end-to-end data subject rights requests.
• Develop and review data protection policies and procedures.

Skills

Data privacy expertise

Regulatory compliance

Strong communication

Collaboration

Privacy risk management

Education

CIPP/US, CIPM or equivalent

Legal qualification or privacy law academic background

Job description

Overview

The Data Privacy Manager - US will be a key member of Enstar's Data Privacy function, working closely with the Head of Data Privacy to design, implement, and maintain a robust, multi-jurisdictional data privacy programme across the US. The role holder will be instrumental in embedding a culture of privacy awareness across the business, ensuring compliance with applicable data protection laws across all US territories in which Enstar operates, and supporting the business in managing privacy risk in a fast-moving regulatory environment.

This is a technically demanding role requiring an experienced privacy professional who is performance-driven and comfortable operating across both legal and operational dimensions of data privacy. The role requires strong communication and collaboration across all functional areas within Enstar and the ability to support the delivery of an effective privacy program and solutions that balance regulatory requirements and business objectives.

What you will be doing

• Regulatory Compliance and Governance: Support the Head of Data Privacy in maintaining compliance with applicable data protection legislation across all operating US jurisdictions and our other jurisdictions if required (UK, EU, Bermuda, and Australia), managing the maintenance and updating of the ROPA, monitoring regulatory developments as part of the Horizon Scanning Framework, and managing regulatory registrations and filings.
• Privacy by Design: Manage the initiative to embed privacy by design default principles primarily across the US businesses and our other jurisdictions if required.
• Data Subject Rights: Manage the end-to-end handling and recording of data subject rights requests across the US and our other jurisdictions if required.
• Privacy Assessments: Manage the end-to-end privacy assessment processes for PIAs, DPIAs, and LIAs.
• Third-Party and Vendor Management: Ensure Data Processing Agreements (DPAs) are in place with all relevant data processors, manage privacy due diligence on third-party suppliers as part of the Supplier Engagement Framework.
• Data Breach Management: Support the management of personal data incidents from identification to resolution, if required, support the DPO in the assessment and management of notifiable breaches across jurisdictions, manage the testing of the Data Breach Response Plan, and liaise with Information Security to align incident management processes.
• Training, Awareness and Culture: Design and manage the delivery of data privacy training programmes for employees/contractors at all levels, monitor training completion rates, champion privacy awareness across the business. Assist with the design of the Data Privacy Champions Programme and manage the deployment and development of the Champions Programme.
• Privacy Risk Management: Manage the maintenance and development of the data privacy risk register within the Group’s ERM framework and GRC platform across all jurisdictions. To proactively identify and assess privacy risks, develop proportionate mitigation plans, processes, and controls, track and report on risk mitigation actions, and collaborate with relevant business functions.
• Policies, Procedures and Documentation: Develop, maintain, and review data protection policies and procedures across all jurisdictions, manage the policy review schedule, prepare management information, and reporting on the status of the privacy programme for the Head of Data Privacy and relevant stakeholders.
• International Data Transfers: Manage all international data transfer mechanisms across all operating jurisdictions, ensure all transfer mechanisms are current, properly documented, and subject to regular review; manage the production of TIAs or TRAs where required; and maintain oversight of cross-border data flows arising from third-party arrangements.

What you will bring

• A minimum of four to six years of substantive, hands-on data privacy experience, ideally gained within a regulated financial services, insurance, or professional services environment.
• Relevant professional qualification CIPP/US, CIPM or equivalent.
• Demonstrable expertise in US privacy law (GLBA, CCPA/CPRA, state privacy laws) at a state and federal level.
• Practical experience of managing data subject rights programmes at volume, including SARs in a regulated sector context.
• Proven experience of conducting DPIAs and providing Privacy by Design advice to business stakeholders.
• Experience of negotiating and reviewing Data Processing Agreements and international data transfer mechanisms.
• Demonstrable experience of managing personal data breaches and advising on regulatory notification obligations.
• Demonstrable expertise in UK GDPR and the Data Protection Act 2018, with solid working knowledge of EU GDPR and at least one of: US privacy law (GLBA, CCPA/CPRA, state privacy laws), or Australian privacy law (Privacy Act 1988, APPs, NDB scheme).
• Experience in the insurance or reinsurance sector, with familiarity with insurance-specific data processing activities (claims, underwriting, fraud prevention databases, actuarial processing).
• Knowledge of the NAIC Insurance Data Security Model Law and state insurance commissioner notification requirements.
• Familiarity with the California Insurance Information and Privacy Protection Act (IIPPA) and its 2023 amendments.
• Experience of working within a multi-jurisdictional privacy programme spanning EEA, UK, US and/or Australian operations simultaneously.
• Legal qualification (solicitor, barrister or overseas equivalent) or privacy law academic background.
• Enstar offers best-in-class Medical, Dental, and Vision healthcare for single and family coverage.
• Board-certified doctors and pediatricians are available virtually 24/7 for urgent care.
• Access to Health Savings Account (HSA) or Flexible Spending Account (FSA).
• Access to Dependent Care FSA to cover daycare expenses.
• Access to Employee Assistance Programs (EAP) for health and well-being.
• Optional Pet & Home/Auto Insurance.
• Wellness Reimbursement program (up to $600 annual reimbursement for wellness-related expenses, i.e., gym memberships, massage, etc.).
• 401K retirement plan (company matches up to 6% of employee contribution).

General Info

The target base salary pay range for this role is $105,000-$145,000*

*Target full-time equivalent base salary range is based on relevant market data. The actual salary offered will depend on applicable market data for hiring location and relevant candidate knowledge, skills/experience. This salary range is not inclusive of applicable discretionary incentives.

Who we are

We are a trusted global re/insurance group and the leading provider of retrospective solutions, with specialist underwriting capabilities. We help our clients manage risk, unlock capital and create the financial freedom to grow. With operations across the world’s major insurance hubs and a global network of close to 800 talented professionals, we bring expertise and fresh thinking to some of the industry’s biggest challenges.

For more information about Enstar, visit our website: www.enstargroup.com.

For more information about careers at Enstar, visit our LinkedIn Life page or visit our careers site

Why Enstar

Learning and development are a fundamental part of every employee's career journey with Enstar. Supporting growth and career progression is key to how we engage our people - helping them to learn, grow and succeed at Enstar.

We offer a range of initiatives and resources to support our people throughout their careers:

• Professional Qualifications and Study Support: We support employees who wish to take professional qualifications aligned to their role and career development.
• Training, Conferences & Seminars: As a global organisation, we work with many professional bodies to provide access to training programmes, conferences, seminars and continuing professional development (CPD) opportunities.
• Digital Learning Hub: Our digital learning hub, LinkedIn Learning, offers a wide range of self-serve resources, including courses, videos, eBooks, and audio books, to help employees build new skills and deepen their knowledge.

We also invest in physical, mental and financial wellbeing initiatives for our employees. Supportive teams, inspiring work and a positive working environment all contribute to our collective wellbeing. Beyond the workplace, we strive to make a positive influence in our communities and to continuously reduce our impact on the environment.

Enstar Inclusivity Policy:

Our annual Inclusivity Index puts Enstar ahead of the industry in terms of promoting an inclusive and welcome working environment. We’re an equal opportunity employer and believe that our inclusive environment creates an authentic working culture. We don’t discriminate on the basis of age, physical or mental disability, gender reassignment, marriage and civil partnership, pregnancy and carer status, race (including colour, nationality, and ethnic or national origin), religion or belief, sex and sexual orientation. Enstar is committed in providing an accessible recruitment experience for all those interested in working with us. Please let your Enstar Recruitment Partner know if you require any reasonable accommodation during the application process due to a disability to enable you to fully participate in our recruitment process.