Data Governance Analyst - Onsite

Genesis
10 is currently seeking a Data Protection and Privacy Analyst for an onsite position with a Major Insurance Company located in Chicago, IL. This is a 6+ month contract to hire opportunity. Compensation: $56.00 - $66.00 per hour, W2, based on experience and qualifications

Position Overview:

The Data Protection and Privacy Analyst will work closely with the Legal, Procurement, Security, Compliance and IT teams to identify, document and support initiatives necessary in developing, implementing and maintaining elements of data management and compliance goals, strategies, and plans. This includes supporting the development and implementation of the data governance, protection, and privacy programs for the protection of data throughout its lifecycle.

Primary Responsibilities:

Maintains and supports data protection and privacy programs through successful on-time delivery of planned objectives Assists in developing, administering and maintaining enterprise risk-management processes and procedures with an emphasis on risk controls Collects data from different departments to prepare quarterly risk reports to Data Protection, Security, and Risk Committees Assists and participates in the design, development, and implementation of a Data Protection Impact Assessment (DPIA) process Participates in audit and regulatory inquiries and external vendor activities to help represent the Company from information security and customer privacy perspectives Assists in designing, implementing, and auditing the IT privacy and security quality management system Collaborates across the organization to review business processes and procedures and verify that they support and preserve individuals' privacy rights Supports and participates in the design, development, and implementation of IT security and privacy solutions for responding to data subject rights requests Provides support, advice and guidance to the data protection team, data governance and IT team to ensure IT systems and developments adhere to privacy and data protection requirements Contributes to the development and delivery of initial and ongoing privacy and information security awareness and training Serves as a resource for information privacy and security Actively monitors risks and issues for assigned projects and when necessary, escalates issues to management's attention for guidance and assistance in reaching a resolution Core Requirements: 3 years of experience working with highly sensitive and confidential information and projects with a minimum of 1 year of security-related experience in a global role Excellent organizational skills and ability to operate and communicate effectively while meeting multiple deadlines and completing projects simultaneously Ability to analyze information and construct an action plan tailored to resolve issues effectively and cooperatively Knowledge of compliance, international, federal and state laws, regulations, and guidance related to information privacy and security and compliance Working knowledge of global privacy and information security laws and regulations (including CCPA, GDPR, GLBA, and HIPAA) 1+ years of experience in a security, compliance, risk and/or privacy-related role with quality management experience in data protection, data policy, privacy claims, and information security compliance CIPM, or equivalent required Demonstrated ability to use superior judgment and discretion in dealing with sensitive and confidential information Working knowledge of ISO 27001, PCI, HIPAA, NIST, and/or equivalent series of standards Proven knowledge of formal information security and privacy standards, techniques and methodologies Ability to collaborate effectively and work both independently and in a team environment Exceptional verbal and written communication skills and people skills Highly motivated, team oriented, professional and trustworthy, with strong skills in personal diplomacy Desired

Skills:

CIPP, PCI ISA/QSA, CISA, CISM, CISSP

Preferred Experience in a Security, Privacy, Compliance, and/or risk management function within both consultancy and company Specific or additional training in information…