Technology Compliance & Privacy Analyst - Kastech Software Solutions Group

Manager Notes:

Manager strongly prefers candidates who are qualified lawyers with experience in U.S. law, as this background would be highly valuable for the role.

Suggested: Brazil, Colombia, Argentina.

Overview:

This contractor will support the Privacy & Technology Compliance Program. It will be focused on identification and analysis of privacy and other technology compliance risks across the ecosystem including AI, Open-Source, Cloud/SaaS/SASE application architecture, and other related evolving areas of global regulatory attention. This position will also manage legal documentation related to Records of Processing Activity, Data Mapping and Data Governance, Service Provider documentation, and other similar requirements.

You will use a tactical approach to increase visibility of privacy and other data and technology-related compliance concerns to reduce risks while enabling business initiatives across the ecosystem. This includes facilitating conversations with business partners to understand their needs and goals, potential risks, and how we can find an effective solution.

The Analyst works cross-functionally with the business, DTS (IT), and enterprise functions to identify risk and opportunities for mitigation. You would serve as a trusted advisor to partners in DTS and the business, at all levels of the organization. Strong communications skills are key, with the ability to communicate complex issues in clear non-technical language. You should be able to influence key business partners, and drive consensus in complex stakeholder environments with multiple conflicting priorities.

Specific Responsibilities:

• Work cross-functionally with many teams across the business.
• Conduct privacy impact assessments/DPIAs of programs, systems, advertising and marketing campaigns, digital platforms and properties, and vendor and their services.
• Provide practical and easy to understand compliance guidance to partners throughout the organization, daily.
• Document Record of Processing Activities, data mapping, Service Provider, Controller-Processor DPAs, and other required forms of documentation for the Privacy & Technology Compliance Program globally.
• Understand and stay abreast of global privacy and technology legal requirements and be able to identify regulatory implications. This includes conducting research on new regulations, sanctions, or findings.
• Identify repetitive technology/privacy compliance questions and requests, and develop proactive ways to reduce the one-off requests, through training, guidelines, or other means.
• Maintain privacy-related notices, policies, standards, guidelines, and processes of the Privacy and Technology Compliance Program.
• Create and maintain compliance playbooks for business and DTS partner use.