Privacy and Compliance Program Manager

Berry Appleman & Leiden; Richardson (TX); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Berry Appleman & Leiden is seeking a Privacy & Compliance Program Manager to design and implement privacy-related policies and processes across the organization. You will work with the Information Security and Privacy Council to drive changes and ensure ongoing regulatory compliance.

The role includes managing privacy activities, DPIAs, audits, and third-party assessments, with responsibility for OneTrust governance. Telecommuting is possible in this position.

Qualifications

• Must have a Bachelor's degree in Computer Science, Information Security or related field.
• 60 months of progressive, post-baccalaureate experience in privacy/compliance roles.

Responsibilities

• Design and implement privacy and compliance-related policies, controls, and processes.
• Lead policy changes with BAL ISPC and drive policy modifications.
• Manage privacy activities for ongoing privacy compliance for regulations such as GDPR.
• Coordinate Data Privacy Impact Assessments (DPIA) to minimize data protection risks.
• Oversee privacy audits, compliance checks, and external privacy assessments.
• Serve as administrator of OneTrust and monitor data governance throughout the program.

Skills

Policy development

Compliance management

Privacy risk assessment

Education

Bachelor's degree in Computer Science or Information Security

Tools

OneTrust

Job description

• Design and implement privacy and compliance-related policies, controls, processes and leading practices.
• Work with the BAL Information Security and Privacy Council (ISPC) to determine whether the privacy-related policies/processes need to be modified or developed and drive any necessary policy/process changes.
• Manage, own, and coordinate all applicable privacy activities and processes associated with the ongoing maintenance and care of privacy compliance requirements such as EU-US DPF, GDPR, etc.
• Facilitate the definition of scope, goals and deliverables for defined privacy program projects.
• Responsible for communication to internal and external clients as it pertains to actions driven by the Privacy Program; including privacy breach processes.
• Advise on a variety of privacy topics, including incident response, leading privacy-related controls, and responding to data subject access requests. Identify, assess and communicate key privacy risks within the BAL operational environment.
• Monitor and report on the ongoing initiatives of the privacy program to the Senior Manager of Enterprise Security & Privacy.
• Lead the coordination of Data Privacy Impact Assessments (DPIA) to help identify and minimize the data protection risks across the organization.
• Monitor, track, and document changes to regulatory and compliance requirements.
• Provide ongoing support to the third party risk management program to include internal program development and external third party privacy assessment.
• Supports privacy audits, compliance checks and external assessment processes for our internal and external auditors.
• Participate in contract review and negotiation specific to privacy terms and data protection addendums.
• Supervise and coordinate all required internal audits required for ISO 27001 and 27701 compliance.
• Lead critical activities required to maintain ISO compliance, including, but not limited to, performance of risk assessments, mandatory clauses and control reviews.
• Own the Data Governance program including updates to data maps and monitoring of compliance with documented policies and procedures. Serve as the administrator of and subject matter expert (SME) for the OneTrust tool. May telecommute.

Job Requirements

Must have a Bachelor’s degree in Computer Science, Information Security or related field and 60 months of progressive, post-baccalaureate experience in job offered or in a Privacy and Compliance Program Manager-related occupation.

Qualifications

Skills

Behaviors

:

Motivations

:

Education

Experience

Licenses & Certifications

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.