Sorenson: Privacy Compliance Analyst

Company: sorenson
Location: Salt Lake City
Posted on: February 24, 2021

Job Description:

Job DescriptionJob Summary The Privacy Compliance Analyst is responsible for supporting the development and implementation of Sorenson's data privacy program. This includes supporting the development of strategies, policies, and procedures related to the protection of data throughout its lifecycle. This person will design and consult on the implementation of privacy controls, perform testing and audits of privacy requirements and manage remediation efforts across the enterprise. In addition, the role will work with stakeholders to define the privacy requirements for external organizations with whom Sorenson has a business need to share information; will facilitate compliance with the identified requirements to control risk; will represent the program to internal and external stakeholders; and will support the development and implementation of training and awareness programs. This role will work closely with our Information Security Assurance analysts in the performance of risk assessments, regulatory research, and to assist in the alignment between Security and Privacy programs. This includes conducting internal testing to measure compliance with HIPAA, GDPR, CCPA, ISO, NIST and other regulations and frameworks. This position will report to the Chief Privacy Officer. Essential Duties and Responsibilities * Designing, developing and implementing policies, identifying technologies to support policy objectives, and supporting risk assessments (e.G. third-party risk, privacy, data protection). * Research both regulatory filing information and writing and communicating guidelines to keep other departments aware of requirements * Performing risk assessments and audits with limited supervision from management * Capturing and analyzing information to identify key risks and corresponding controls * Systematically testing and evaluating controls to verify efficiency and effectiveness of operation, reliability of information and compliance with applicable laws and regulations. * Conduct internal testing to measure compliance with HIPAA, GDPR, CCPA, ISO, NIST and other regulations and frameworks. * Effectively communicate findings and recommendations to management in detailed and organized format/process * Organize, Monitor, Following-up and implement corrective actions * Delivering training to other members of the company on policies and procedures * Work with Compliance Department, IT, and department managers to support an-nual external industry standard security and privacy audits conducted by external audit firms. * Consult on company projects to ensure that privacy risks are being addressed. * Perform miscellaneous duties, special projects, and ad hoc assignments as as-signed Supervisory Responsibility This position has no supervisory responsibilities. Travel Requirements Travel Requirements: Less than 25% Education Minimum/Preferred Education Description Minimum 4 Year / Bachelors Degree Minimum One or more of the following Certifications: Certified Privacy Professional (CPP Preferred), CRISC, Certified Information Systems Auditor (CISA Preferred), Certified Information Privacy Management (CIPM), or others with comparable experience Experience Minimum Years of Experience Description 5 experience in Legal, Risk Management, Compliance management, data protection controls or auditing Experience with GRC tools for information gathering and reporting Knowledge of government and/or industry regulatory requirements (GDPR, CCPA, HIPAA, etc.) Basic understanding of systems development life cycle methodologies required. Knowledge, Skills, and Abilities * Ability to write data mapping and solution workflow diagrams, system documentation, playbooks, policies, etc. * Good understanding of fundamental business, information technology and security concepts * Know when it's most efficient to ask for help and be willing to do so. * Excellent communication, teamwork and client service skills. * Strong presentation and project management skills. * Demonstrated integrity within a professional environment * Strong working knowledge of GRC methodologies, risk analytic tools and devel-opment of information risk metrics required. * Strong capabilities in gap analysis, review and validation of relevant security, privacy and regulatory requirements. Working Conditions and Physical Requirements * Able to sit/ stand for a long period of time in an office environment * Dexterity of hands and fingers to operate a computer keyboard, mouse, tools, and to handle other computer components * Regular and predictable attendance required. Disclaimer This position has access to highly confidential, sensitive information relating to the employees, customers, and technologies of Sorenson Communications and CaptionCall. It is essential that applicant possess the requisite integrity to maintain the information in strictest confidence. Equal Employment Opportunity: CaptionCall and Sorenson Communications are an EOE, Disability/Age Employer. #ZR

Keywords: sorenson, Salt Lake City , Sorenson: Privacy Compliance Analyst, Professions , Salt Lake City, Utah