Sr. Privacy Compliance Analyst

SIC Standard Insurance Company - 3000; Portland (OR); On-site; USD 76,000 - 112,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company match

Annual incentive bonus

Generous paid time off

Parental leave

Volunteer hours

Employee giving program

Job summary

The Standard is seeking a Senior Privacy Compliance Analyst to lead the end-to-end handling of privacy incidents, coordinating across legal, IT, operations, and vendors to ensure timely, compliant responses. You will develop policies, monitor evolving laws, and train teams on incident reporting and remediation.

You will be responsible for risk assessment, regulatory notifications, and improving the privacy program with data-driven metrics and reporting.

Qualifications

• Bachelor’s degree or equivalent experience in business, legal, or related field.
• Professional privacy, compliance, or security certifications preferred.
• 4–6+ years in privacy, fraud, or information security roles.

Responsibilities

• Lead end-to-end privacy incident response, from intake to closure.
• Assess incident scope and notify regulators, individuals, and partners.
• Perform root cause analyses and track corrective actions.
• Advise business units on incident handling and privacy controls.
• Develop and maintain incident response policies, playbooks, and training.
• Monitor privacy laws and participate in industry discussions.

Skills

Incident response

Privacy compliance

Regulatory knowledge

Risk assessment

Cross-functional collaboration

Education

Bachelor’s degree or equivalent

Job description

The next part of your journey is right around the corner — with The Standard. A genuine desire to make a difference in the lives of others is the foundation for everything we do. With a customer-first mindset and an intentional focus on building strong teams, we’ve been able to uphold our legacy of financial stability while investing in new, innovative technologies that support the needs of our customers. Our high-performance culture focused on operational excellence thrives thanks to remarkable people united by compassion and a customer-first commitment. Are you ready to make a difference?

Job Summary:

The Senior Privacy Compliance Analyst serves as the subject matter expert and point of contact for privacy incident response and incident handling across the organization. This role leads the intake, investigation, risk assessment, notification, and resolution of privacy incidents, while monitoring and interpreting evolving privacy and data protection requirements and translating regulatory obligations into practical business processes, guidance, and controls. This role partners with legal, information security, IT, product, operations, claims, and service teams to ensure privacy incidents are promptly identified, escalated, investigated, contained, and remediated in compliance with applicable legal, regulatory, and contractual requirements.

Key Responsibilities:

• Incident Response & Management: Lead and coordinate the end-to-end response to privacy incidents, including intake, triage, investigation, containment, remediation, and closure. Ensure timely escalation to appropriate stakeholders and leadership and maintain accurate incident records and reporting.
• Incident Risk Assessment & Notification: Assess the scope and risk of incidents and determine whether they trigger regulatory, contractual, or individual notification obligations under applicable federal and state requirements. Draft and coordinate notifications to affected individuals, regulators, and business partners within required timeframes.
• Root Cause Analysis & Remediation: Conduct root cause analysis of incidents, identify control gaps and trends, and recommend and track corrective and preventive actions to completion in alignment with regulatory requirements.
• Business Partnership & Advisory: Provide subject matter expertise and consultative guidance to business units, legal, and information security on incident handling and privacy compliance, including incidents involving third-party vendors. Research complex questions using internal and external resources.
• Policy, Process, & Documentation Development: Draft, update, and maintain and improve incident response policies, procedures, playbooks, job aids, training materials, and compliance guidance to support consistent and compliant incident handling.
• Regulatory Monitoring & Industry Interaction: Monitor, analyze, and interpret privacy, data protection, and breach notification laws and regulations, and communicate business implications to stakeholders. Participate in industry forums and meetings to monitor incident response trends and develop and maintain productive working relationships with industry contacts.
• Audit & Regulatory Support: Support internal audits, regulatory examinations, and regulator inquiries related to privacy incidents by organizing documentation, responding to inquiries, and assisting with corrective action plans. Deliver training, presentations, and guidance on incident reporting and response requirements and emerging regulatory trends.
• Privacy Metrics, Reporting & Trend Analysis: Develop and maintain privacy incident metrics, trend analyses, and reporting to identify recurring risks, evaluate response effectiveness, and support continuous improvement of the privacy compliance program.
• Privacy Controls and Process Improvement: Identify opportunities to strengthen privacy controls, operational procedures, and preventive measures based on incident findings, regulatory developments, and emerging privacy risks.

Skills and Background You’ll Need:

• Education: Bachelor’s degree or equivalent experience (business, legal, or related field preferred)
• Certification: Professional certifications in privacy, compliance, or security (e.g., CIPP/US, CIPM, CISSP, or similar) (preferred)
• Experience: 4–6+ years of privacy, fraud, information security
• Demonstrated experience handling privacy and security incidents from intake through investigation, risk assessment, notification, and closure, with the ability to translate complex regulations into practical guidance.
• Proven ability to manage complex work, assess risk, and meet deadlines in a detail-oriented, time-sensitive environment.
• Basic knowledge of federal and state privacy, data protection, and breach notification requirements.
• Experience coordinating incident response with information security, legal, and third-party vendors, including managing regulator inquiries following an incident. (preferred)
• Experience developing playbooks, training materials, and compliance guidance. (preferred)

#LI-DNI

Key Behaviors of a Successful Candidate:

• Winning Together: Excellent verbal and written communication skills with the ability to build trust and effective partnerships with both internal and external stakeholders. Fosters teamwork, maximizes efficiencies, and works to promote collaboration and delivery of exceptional customer experiences.
• Driving success: Ability to manage competing priorities, work autonomously, and exercise judgement and discretion in making decisions, including in time-sensitive incident situations, to meet deadlines and stakeholder expectations.
• Strong analytical, critical thinking, and problem-solving capabilities that bring ideas to life and drive continuous improvement to take us “next level”.
• Customer Focus: Partner cross-functionally to provide creative solutions to meet customer objectives while maintaining compliant processes and controls.

Why Join The Standard?

• A rich benefits package including medical, dental, vision and a 401(k) plan with matching company contributions
• An annual incentive bonus plan
• Generous paid time off including 11 holidays, 2 wellness days, and 8 volunteer hours annually — PTO increases with tenure
• A supportive, responsive management approach and opportunities for career growth and advancement
• Paid parental leave and adoption/surrogacy assistance
• An employee giving program that double matches your donations to eligible nonprofits and schools

In addition to the competitive salary range below, our employee-focused benefits support work-life balance.

Learn more about working at The Standard.

Eligibility to participate in an incentive program is subject to the rules governing the program and plan. Any award depends on a variety of factors including individual and organizational performance. The actual compensation for this role will be based on a combination of education and experience, knowledge and skills, position budget, internal equity, and market data.

Salary Range: $76,250.00 - $111,500.00 Positions will be posted for at least 5 days from original posting date.

Standard Insurance Company, The Standard Life Insurance Company of New York, Standard Retirement Services, Inc., StanCorp Mortgage Investors, LLC, StanCorp Investment Advisers, Inc., and American Heritage Life Insurance Company and American Heritage Service Company, marketed as The Standard, are Affir… [full text omitted for brevity]