Data Privacy Regulatory Compliance Consultant

CNA Insurance; Melville (NY); On-site; USD 60,000 - 100,000; Full time

Job summary

An established industry player is looking for an individual contributor to lead Data Privacy and Records Management compliance efforts. This role involves monitoring evolving regulations, developing compliance programs, and training staff to ensure adherence to federal and state laws. The ideal candidate will possess solid knowledge of corporate regulatory practices, strong analytical skills, and the ability to manage multiple projects effectively. Join a company that values its employees and fosters a culture of compliance and accountability, where your contributions will make a significant impact on the organization’s success.

Qualifications

• 5+ years of experience in data privacy and records management.
• Knowledge of US privacy laws and insurance compliance practices.

Responsibilities

• Monitor evolving data privacy laws for compliance.
• Develop and implement compliance training and metrics.

Skills

Corporate regulatory compliance

US privacy laws (CCPA, HIPAA, NYDFS)

Analytical skills

Project management

Interpersonal communication

Microsoft Office Suite

Education

Bachelor's degree in a related discipline

Compliance certification

Tools

Microsoft 365

Job description

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.

Individual contributor responsible for handling Data Privacy and Records and Information Management processes to ensure the organization conducts its operations in compliance with the applicable federal, state, or local regulatory frameworks.

JOB DESCRIPTION:

Essential Duties and Responsibilities

Performs a combination of duties:

With a focus on Data Privacy and Records and Information Management compliance programs–

1. Monitors evolving data privacy laws and regulations to ensure ongoing compliance.
2. Interprets, implements, develops and administers compliance programs, policies, procedures, and practices.
3. Leads the development and implementation of compliance training.
4. Develops compliance metrics and reports for senior management.
5. Conducts testing and monitoring of compliance programs. Effectively works across business areas and disciplines to implement corrective actions.
6. Leads or takes part in special projects aimed at strengthening the company's compliance programs and effectively mitigates potential compliance exposures.

Reporting Relationship

• Director or above

Skills, Knowledge, and Abilities

1. Solid technical knowledge of corporate regulatory compliance practices with a preference for specific insurance related compliance knowledge.
2. Knowledgeable in US privacy and security laws and regulations, such as CCPA, HIPAA, and NYDFS Cybersecurity regulations. Proficient in records retention laws and regulations.
3. Demonstrated ability to achieve results by taking a proactive and strategic view of business goals and objectives.
4. Excellent analytical and critical thinking skills, capable of effectively resolving moderately complex situations and issues.
5. Experience with project management, organizational, and planning skills, able to manage multiple projects efficiently.
6. Excellent interpersonal, presentation, verbal, and written communication skills, with the ability to interact effectively with all levels of the organization and with external business partners.
7. Versed in Microsoft Office Suite and other business-related software systems.

Education and Experience

1. Bachelor's degree in a related discipline, or equivalent
2. Minimum of 5 years of related work experience, including at least 3 years of data privacy and/or Records and Information Management experience
3. Prior work experience in the insurance industry preferred
4. Prior work experience with records and information management in Microsoft 365 environment preferred
5. Experience with international privacy and security law is a plus
6. Compliance certification preferred