Compliance Manager - Privacy

Position: Compliance Manager - Privacy Offer
In a world of possibilities, pursue one with endless opportunities. Imagine Next!

At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what's possible.

*
* Job Description:

*
* Parsons is looking for a talented  
** Compliance Manager - Privacy Offer
** to join our team! In this role you will oversee GDC's Data Governance and Privacy Program, including the day-to-day management of program operations and the development, implementation, and maintenance of privacy policies and procedures. Reporting to the Chief and Deputy Chief Ethics and Compliance Officer (CECO), this role is also responsible for monitoring compliance, investigating and tracking privacy incidents and breaches, and ensuring adherence to applicable federal and state laws and regulations.

** Program background*
* _The Gateway Program is the most urgent infrastructure program in the country - a comprehensive set of rail investments that will improve commuter and intercity services, add needed resiliency and, in its later stages, create new capacity between Newark, New Jersey and New York City, the busiest section of the Northeast Corridor (NEC). The first phase of the Gateway Program includes the Hudson Tunnel Project (HTP), which includes the construction of a new two-track tunnel under the Hudson River connecting to Penn Station New York as well as the full rehabilitation of the existing 110-year-old North River Tunnel.

The Gateway Development Commission (GDC), established through bi-state legislation, is responsible for the financing and development of the Hudson Tunnel Project._

** What You'll Be Doing:*
* + Establish and lead a data governance privacy program for GDC consistent with applicable laws.

+ Establish a data privacy audit program.

+ Undertake a comprehensive review of GDC's data and privacy activities to ensure that they are consistent with industry's best practices and our legal requirements.

+ Develop and manage an organizational policy development process that includes procedures that ensure GDC activities are consistent with its legal obligations.

+ Establish a process for receiving, documenting, tracking, investigating, and acting upon on all complaints concerning GDC's privacy policies and procedures.

+ Work alongside management to establish a mechanism to track access to protected personal information, within the purview of GDC and as required by law and to allow qualified individuals to review or receive a report on such activity.

+ Provide leadership in the planning, design, and evaluation of privacy and security-related projects and activities.

+ Periodically revise the privacy program to address changes in laws, regulations, or company policy.

+ Provide privacy guidance to assist in the identification, implementation, and maintenance of GDC's information policies and procedures. Ensure new projects have a privacy review before implementation.

+ Coordinate with GDC's Chief Ethics and Compliance Officer, GDC's General Counsel, GDC's Inspector General, GDC's Head of Internal Audit, GDC's Deputy Chief of Information Technology, and GDC's vendors and Supporting or Executing Partners (e.g. NJ TRANSIT, Port Authority of New York and New Jersey, and Amtrak) to ensure compliance with privacy and data security obligations.

+ Work with GDC management, key departments, and committees to ensure the organization has and maintains appropriate privacy and confidentiality consent, authorization forms, and information notices and materials reflecting current organization and legal practices and requirements.

+ Coordinate with the appropriate regulating bodies to ensure that programs, policies, and procedures involving civil rights, civil liberties, and privacy considerations are addressed in an integrated and comprehensive manner.

+ Coordinate with regulatory and accrediting bodies as necessary. Work with management to develop relationships with regulators and other government officials responsible for privacy and data security issues.

+ Ensure all processing and/or databases are registered with the local privacy/data protection Authorities, where required.

+ Work with business teams and senior management to ensure awareness of "best practices" on privacy and data security issues.

+ Work with organizational senior management to establish an organization-wide Data Governance/Privacy Committee.

+ Serve in a leadership role for Data Governance/Privacy Committee activities.

+ Interface with Senior Management to develop strategic plans for the collection, use, and sharing of information in a manner that maximizes its value while complying with applicable privacy regulations.

+ Coordinate with the Chief Ethics and Compliance Officer and GDC's Deputy Chief of Information Technology for documenting and reporting…