Director of Privacy

Director of Privacy

<br>

Job Description

<br>

Director, Privacy - Costar Group

Company:

CoStar Group (NASDAQ: CSGP) is a leading global provider of commercial and residential real estate information, analytics, and online marketplaces. Included in the S&P 500 Index and the NASDAQ 100, CoStar Group is on a mission to digitize the world’s real estate, empowering all people to discover properties, insights, and connections that improve their businesses and lives. For over 35 years, CoStar Group has been living and breathing the world of real estate information and online marketplaces, giving them perspective to create truly unique and valuable offerings to their customers. By continually refining, transforming, and perfecting their approach to their business, CoStar has created a language that has become the standard in the industry, for their customers, and even competitors. As they continually work to continue that effort as well as improve and drive innovation, they are able to deliver for their customers, employees, and investors. CoStar Group provides an invaluable edge in real estate, by equipping the brightest minds with the best resources available. 
 
About the Role:

The Director, Privacy will provide CoStar with operational expertise related to data privacy and protection and work closely with CoStar legal stakeholders to lead the global privacy program in order to mitigate risk, protect data assets and information, and drive privacy compliance across the organization. The individual will be responsible for ensuring CoStar is compliant with all applicable international, federal and state privacy and data protection laws and regulations. The individual will be responsible ensuring customer and employee data is being collected, shared and used in appropriate ways, as well as playing a role in safeguarding company proprietary data. The Director, Privacy will perform key risk management activities and is responsible for providing sound compliance advice to all aspects of the business as a subject matter expert. This individual will be expected to be an effective partner across the organization to create solutions that align with the company’s business goals without compromising data protection and information security standards. The Director, Privacy will work as part of the Legal Department’s enterprise compliance and risk management team and will provide subject matter knowledge with national and international compliance standards to ensure governance across CoStar’s global brands and products. The role is ideal for someone who is a proactive self-starter and strategic and practical thinker, who has a thirst for knowledge and continued growth, all while working as part of a great legal team.

RESPONSIBILITIES

• Lead all aspects of CoStar’s global privacy compliance and risk management program, including developing strategy, monitoring the regulatory landscape, maintaining relevant policies, notices and disclosures, and overseeing privacy operations, risk and controls monitoring, and privacy training and awareness.

• Chair CoStar’s cross functional data protection forum that meets regularly to review privacy and data protection priorities and drive awareness and accountability across the organization.

• Oversee and maintain the day to day functioning of CoStar’s global privacy program compliance platform (OneTrust) to support core programs including data subject access rights (DSAR), privacy by design (PIAs, DPIAs, LIAs and TIAs), and records of processing activity (ROPA) management.

• Analyze business initiatives, products, and processes to ensure they comply with applicable laws and regulations; practice sound judgement to effectively assess and balance risk in the provision of compliance advice to the business.

• Create organizational awareness by partnering with the company’s internal training organization to develop and roll out on-going training across CoStar Group related to data privacy and CoStar’s expectations and standards, including identification, processing, and handling of sensitive data.

• Work closely with the technology, accounting, and business risk management teams to identify, assess, advise on, and mitigate privacy risks, as well as implement controls and processes.

• Develop, enhance, and implement privacy and data protection policies, procedures, guidelines, and related training.

• Provide the primary point of contact for business partner privacy compliance related inquiries and collaborate across teams to ensure the global privacy support operations processes are fulfilled and operating smoothly.

• Perform privacy program reporting upon request, creating reports to inform senior leadership, internal and external stak