Data Privacy Analyst (Remote)

About KnowBe4

KnowBe4, the provider of the world's largest security awareness training and simulated phishing platform, is used by tens of thousands of organizations around the globe. KnowBe4 enables organizations to manage the ongoing problem of social engineering by helping them train employees to make smarter security decisions, every day.

Fortune has ranked us as a best place to work for women, for millennials, and in technology for four years in a row! We have been certified as a "Great Place To Work" in 8 countries, plus we've earned numerous other prestigious awards, including Glassdoor's Best Places To Work.

Our team values radical transparency, extreme ownership, and continuous professional development in a welcoming workplace that encourages all employees to be themselves. Whether working remotely or in-person, we strive to make every day fun and engaging; from team lunches to trivia competitions to private parties at theme parks, there is always something exciting happening at KnowBe4.

Remote positions open to the US only.

The Data Privacy Analyst is responsible for assisting with and contributing to KnowBe4’s  Privacy Program including, but not limited to, daily operations of the program, development, implementation, and maintenance of policies and procedures, monitoring program compliance, investigation and tracking of security incidents and breaches in compliance with federal, state and international laws as well as contractual obligations. #ZR

Responsibilities:

• Develop and enforce KnowBe4’s  privacy program that defines policies and processes that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of personal data, paper and/or electronic, across all media types 
• Ensure privacy forms, policies, standards, and procedures are up-to-date, accurate, and within risk tolerance levels
• Research and stay current with privacy related news and changes to policies
• Assist information security team on an  ongoing basis  to track, investigate and report inappropriate access and disclosure of protected information
• Monitor patterns of inappropriate access and/or disclosure of protected information
• Perform initial and periodic information privacy risk assessment/analysis, mitigation and remediation
• Conduct related ongoing compliance monitoring activities in coordination with the organization's other compliance and operational assessment functions
• Ensure  the organization has and maintains appropriate privacy and confidentiality consents, authorization forms, information notices and other materials reflecting current organization and legal practices and requirements
• Assist with the development and delivery of initial and ongoing privacy training to the workforce in coordination with the Growth department
• Participate in the development, implementation, and ongoing compliance monitoring of all business associates and business associate agreements, to ensure all privacy concerns, requirements, and responsibilities are addressed
• Work cooperatively with applicable organization units in overseeing customers’ rights to inspect, amend, and restrict access to protected information when appropriate
• Initiate, facilitate and promote activities to foster information privacy awareness within the organization and related entities.
• Stay informed on applicable privacy laws and accreditation standards
• Work with the Legal Department to represent the organization's privacy interests with external parties who undertake to adopt or amend privacy legislation, regulation, or standard
• Conduct data privacy impact assessments for various different projects
• Research applicable laws, regulations, and standards that KnowBe4 must comply with
• Assist in all applicable audits including but not limited to SOC 2 Type 2, ISO, FedRamp

Minimum Qualifications:

• Bachelor’s Degree in Information Technology, Information Management or similar field,  or equivalent work experience
• Knowledge and experience in information privacy laws.
• Demonstrated organization, facilitation, written and oral communication, and presentation skills
• Strong verbal and written communications
• Excellent time management and organization skills
• Demonstrated skills in collaboration, teamwork, and problem-solving to achieve goals
• Demonstrated skills in verbal communication and listening
• Demonstrated skills in providing excellent service to customers
• Excellent writing skills
• A high level of integrity and trust
• Extensive familiarity with relevant legislation and standards for the protection of information
• Certifications in the Information Privac