Senior Data Privacy Analyst at Constant Contact in Loveland, Colorado

Job Description:

As a Data Privacy Analyst, you will play a pivotal role in ensuring the confidentiality, integrity, and availability of sensitive information within our organization. You will be responsible for implementing data privacy tools and frameworks, conducting data classification and lineage activities, managing data lifecycle including deletion as per retention schedules, and ensuring compliance with relevant regulations such as GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act).



What you'll do:

• Implement and manage data privacy tools and technologies to ensure compliance with regulatory requirements and industry best practices


• Conduct data classification assessments to identify and categorize sensitive information based on its level of confidentiality, criticality, and regulatory implications


• Establish and maintain data lineage documentation to track the flow of data throughout the organization and identify potential privacy risks


• Collaborate with cross-functional teams to develop and implement privacy policies, procedures, and controls to mitigate data privacy risks


• Provide expertise and guidance on data privacy laws and regulations, including GDPR, CCPA, and other relevant frameworks


• Conduct privacy impact assessments (PIAs) and assist in developing strategies to address identified privacy risks


• Monitor and analyze privacy incidents, breaches, and complaints, and ensure timely reporting and remediation


• Implement data lifecycle management processes including data deletion as per retention schedules to ensure compliance with regulatory requirements and organizational policies


• Develop integrations between Data Management tools including but not limited to workflow engineering, setting up scripts, calling (web) service APIs, adding a Java module, creating integration with a target system, developing scripts to import and export data


• Stay informed about emerging trends, technologies, and regulatory developments in the field of data privacy and security

• 5+ years of proven experience in implementing data privacy tools and technologies in a corporate environment


• Strong understanding of data classification methodologies and techniques, as well as data lineage concepts


• In-depth knowledge of global privacy laws and regulations, including GDPR, CCPA, HIPAA, and related frameworks


• Excellent analytical skills and attention to detail, with the ability to assess complex privacy issues and develop effective solutions


• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and communicate technical concepts to non-technical stakeholders


• Relevant certifications such as CIPP/E, CIPP/US, CIPT, or equivalent are highly desirable


• Experience in conducting privacy impact assessments (PIAs) and developing privacy policies and procedures is preferred


• Proficiency in data privacy management platforms (DPMs) and other relevant tools and technologies


• Bachelor's degree in Information Technology, Computer Science, or a related field. Advanced degree or certification in Privacy, Data Protection, or Information Security preferred