Privacy Analyst

At
** HUB International**, we are a team of entrepreneurs. We believe in protecting and supporting the aspirations of individuals, families, and businesses. We help our clients evaluate their risks and develop solutions tailored to their needs. We believe in empowering our employees to learn, grow, and make a difference. Our structure enables our teams to maintain their own unique, regional culture while leveraging support and resources from our corporate centers of excellence.
** OVERVIEW
* * The
** Privacy Analyst
** plays an active role in safeguarding personal information under Hub’s custody and control, and in demonstrating Hub’s compliance with data protection laws and regulations.  The work performed by the analyst, under the supervision of the Sr. Privacy Counsel, will help reduce Hub’s privacy risks and build trust that Hub’s handling of personal information complies with the law and consumers’ reasonable privacy expectations.
Remote and Canada-based applicants are welcome.
** KEY RESPONSIBILITIES
**** Privacy Impact Assessments:
** Conduct and assist in reviewing Privacy Impact Assessments (PIAs) to identify and mitigate potential privacy risks associated with projects, data systems, and activities that involve the processing of personal information across the business. Provide recommendations to minimize risks and promote a privacy-by-design culture among stakeholders.
** Policy Development and Compliance:
** Support the development, implementation, and regular review of Hub’s privacy policies and procedures to ensure alignment with applicable data privacy laws (e.g., HIPAA, GLBA, PIPEDA state-level consumer privacy laws, and GDPR)
Stay informed about changes in privacy regulations and identify areas in Hub’s policies and procedures that must be updated for Hub to remain in legal compliance

Collaborate with stakeholders conducting compliance audits of privacy program activities
** Reporting and Metrics:
** Collect and analyze privacy program metrics to identify trends, measure effectiveness, and support Hub’s continuous efforts to improve the privacy program.

Prepare and present to stakeholders, on a regular basis, reports on Hub’s privacy-related work to comply with regulatory requirements.
** Records of Processing

Activities:

** Support data inventory and data mapping activities to ensure that Hub documents the types of personal information collected, processing purposes, storage locations, recipients, and retention periods.
** Data Subject Access Rights (DSAR) Requests:
** Counsel stakeholders on how to handle privacy inquiries, complaints, and opt-out requests from consumers. Support efforts to automate and improve Hub’s DSAR operations.
** Training and Awareness:
** Assist in developing and delivering privacy training and awareness programs to help employees understand (a) their roles in protecting personal information, (b) best practices when handing personal information, and (c) data breach response procedures.
** Vendor and Third-Party Management:
** Collaborate with Hub’s risk management stakeholders in their due diligence investigations into whether to privacy-related policies and procedures of service providers and third parties align with Hub’s privacy standards.
** Collaboration and Counseling:
** Work closely with legal, IT, security, marketing, and other departments and business lines to ensure data protection measures are (a) aligned with Hub’s privacy program guidelines and (b) effectively integrated into business processes and technology platforms.  Provide advice on privacy best practice, including areas where consumer rights and privacy practices intersect.
** Manage Privacy Impacts of Security Incidents:
** Collaborate with incident response stakeholders and investigation of incidents involving personal information; create records outlining Hub’s compliance with data breach notification and other privacy-related obligations for analysis by counsel (e.g. interviewing individuals involved in an incident to determine what data was impacted).
** Administrative Tasks:
** Perform other administrative tasks as needed to support Hub’s privacy program.
** QUALIFICATIONS
* ** Certification:
Certifi…