Please reference the schedule and minimum qualifications listed below before applying.

If you need assistance with filling out our application form or during any phase of the application, interview, or employment process, please notify our Human Resources Team at 801-366-6947 option 1 or email macurecruiting@macu.com and every reasonable effort will be made to accommodate your needs in a timely manner.

Job Summary

The Senior Privacy Analyst is responsible for administering all aspects of the Credit Union’s Privacy Program including but not limited to daily operations of the program, development, implementation, and maintenance of policies and procedures, monitoring program compliance, ensuring adherence with federal and state privacy laws and regulations, and creating enterprise-wide strategy for continuous improvement of the privacy program.

Job Description

SCHEDULE

Full-Time

LOCATION

Mountain America Center

9800 S Monroe St

Sandy, Utah

To be effective, an individual must be able to perform each job duty successfully.

• Build, refine, and implement a strategic and comprehensive privacy program that defines, develops, maintains and implements policies and processes that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of nonpublic personal information (NPI) across all media types.
• Ensure that privacy disclosures, policies, standards, and procedures are up-to-date, compliant with applicable laws and regulations, and consistent with the Credit Union’s use of member and employee data.
• Work with Credit Union leadership to establish, implement, and monitor governance of the privacy program. 
• Collaborate with the information security officer, compliance teams, and data governance team to ensure alignment between information security, data governance and privacy compliance programs including policies, practices, investigations.
• Collaborate to ensure alignment between data governance and privacy compliance programs. 
• Ensure that privacy risk is accounted for in enterprise and team risk assessment, mitigation and remediation. 
• Work with Information Security teams to ensure that the Credit Union’s acceptable use procedure for artificial intelligence adequately addresses privacy concerns; thereafter, work with operational teams to ensure adoption of the acceptable artificial intelligence use procedures.  
• Partner with internal teams to ensure sufficient ongoing privacy training for Credit Union employees. 
• Coordinate with the Legal and Vendor Management team to ensure that third-party contracting and monitoring adequately addresses privacy practices of third and fourth parties that may process, possess, access, or transmit NPI.
• Prepare reports to the Credit Union board and/or senior management regarding all aspects of the privacy program. 
• Maintain current knowledge of applicable federal and state privacy laws and regulations.
• Partner with leadership to represent the Credit Union’s information privacy interests with external parties (state or local government bodies) who undertake to adopt or amend privacy legislation, regulation, or standards.
• On collaboration with the Data Governance team, Administer the end-to-end data deletion request process as set forth in the CCPA or other similar privacy laws.
• Serve as information privacy subject matter expert for all privacy related issues.

KNOWLEDGE, SKILLS, and ABILITIES

The requirements listed are representative of the knowledge, skills, and/or abilities required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions.

Knowledge

Thorough knowledge of privacy laws and regulations like GDPR, GLBA, CCPA, etc. Understanding of privacy frameworks like NIST 800-53. Knowledge of privacy best practices for notices, assessments, incident response, etc.

Experience

At least 4 years of professional experience in privacy, data protection, compliance, IT audit, or a related field. Specific experience managing privacy programs and initiatives is preferred.

Education

A bachelor's degree in a relevant field like information technology, computer science, or business is usually required. Education must be from an accredited institution.  Education and work experience will be verified.

Licenses, Certifications, Registrations

Obtaining a privacy certification like CIPP, CIPM, and/or CIPT is highly recommended.

Manager