Staff Global Privacy Analyst

RELOCATION ASSISTANCE: No relocation assistance available

CLEARANCE TYPE: Top Secret

TRAVEL: Yes, 10% of the Time

Description

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Northrop Grumman is seeking an experienced Staff Global Privacy Analyst to join our Insights & Intelligence team within the Chief Information and Digital Office. Insights and Intelligence leads the integrated analytics, AI, data and intelligence strategy for the company and our mission is to reimagine decision making by bridging the gaps between organizations and connecting our business strategy to the right insights, analytics, and data.

As a global privacy analyst, you will report to the Global Privacy Manager and will play a critical role in ensuring policy and regulatory compliance, mitigation of business risk, and responsible handling of personal data. You will champion privacy principles and collaborate seamlessly with stakeholders by decomposing complex privacy concepts for translation and understanding across teams. You will leverage your knowledge of the regulatory environment and critical thinking skills to identify creative and effective solutions.

The primary location for this position is in Falls Church, VA; alternative work locations/arrangements will be considered as well, including working 100% virtual/remote.
 

Responsibilities include but are not limited to:

• Support privacy and data governance controls by maintaining data inventories, conducting data mapping, implementing privacy by design, ensuring data minimization, and ensuring data retention requirements.
• Collaborate with business stakeholders across disciplines (e.g., law, IT, AI and data governance, communications, global supply chain, cybersecurity, etc.) on privacy assessments of products, technologies, and vendors and proactively identify and address potential privacy concerns.
• Draft Standard Contractual Clauses and review contract language related to personal data to ensure compliance with business standards and global data protection regulations.
• Investigate and resolve privacy-related inquiries, questions, and/or complaints.
• Develop, evaluate, and refine privacy policies, procedures, documentation, company guidance, and processes in alignment to the evolving regulatory environment and in pursuit of continuous improvement.
• Develop and implement initiatives to increase employee awareness and knowledge of key privacy topics including company policies
• Establish and apply privacy best practices and mentor and train early career privacy professionals.
• Understand technical terminology to translate between technical and privacy teams on regulatory requirements.
• Manage team mailboxes to respond to privacy queries.
• Exhibit personal ownership and accountability for continuous improvement.
• Identify critical issues with ease.  Exhibit confidence and knowledge of privacy best practices with minimal oversight.
• Mentor and train early career privacy and data professionals.
• Complete special projects as requested.

Basic Qualifications:

• At least 12 years of experience in any of the following disciplines: Privacy, Data Governance, and/ or Legal with a Bachelors degree, or at least 10 years of experience with Masters degree
• Demonstrated understanding of global privacy and AI Governance laws, including the GDPR, EU AI Act, CCPA, CPRA, PIPL, NIST 800-171 and other applicable regulations and standards.
• At least two (2) IAPP certifications or related industry certifications.
• Demonstrated experience negotiating data protection agreements with external vendors to ensure all applicable data privacy law requirements are met.
• Demonstrated experience in operationalizing privacy-by-design principles in product development cycles by conducting data protection impact assessments and implementing risk mitigation strategies tailored to business needs.
• Excellent verbal and written communication skills and proven ability to build relationships and