Sr. Data Privacy Analyst

Location:  Open to market areas outside of Dallas/Fort Worth

Your role

We are seeking an experienced Data Protection (Privacy) Senior Analyst to join our organization. The IT function at Digital Realty takes responsibility to manage and secure some of the world’s most critical infrastructure on behalf of our customers. The Data Protection (Privacy) Senior Analyst will be detail-oriented, self-driven and forward-thinking individual who is well versed in implementing and maintaining Data Protection policies and procedures, monitoring compliance with relevant regulatory requirements, analyzing privacy & security risks, and responsible for supporting the IT Data Protection/Privacy maturity efforts. The candidate will work closely with the existing Privacy and Data Governance Programs.

What you’ll do

• Collaborate closely with the Privacy program, Data Governance and other business functions involved in driving Data Protection requirements at DLR.
• Support with performing privacy impact assessments (PIA) and data mapping activities.
• Assist in ensuring successful and effective execution of IT data protection goals, implementation, as well as exceptional services in ongoing operation of DLR’s IT Data Protection objectives.
• Support the implementation of privacy policies and procedures across the organization and provide guidance to ensure business processes adhere to policies and procedures.
• Works closely with internal stakeholders to evaluate and identify any gaps and supports finding solutions & strategies to ensure full compliance with data protection & privacy regulations and requirements.
• Identifies and reports privacy risks appropriately and assist with the implementation of risk mitigation strategies.
• Support Data Subject Access Requests (DSARs) within the IT organization.
• Assists in the preparation, maintenance, and implementation of data protection policies and standard operating procedures.
• Ensures business strategies, plans and initiatives are driven/delivered in compliance with governing regulations, internal policies, and procedures.
• Participate in projects to verify business practices align with company privacy program including regulatory requirements.
• Facilitates discussions with the business on privacy/data protection Awareness & Requirements, including those relevant to cybersecurity controls.
• Stays abreast of applicable Global, Federal and State privacy Regulations and accreditation standards and monitors advancements in information governance technologies to ensure that they support the Data Protection (Privacy) program and organization in adaptation and compliance efforts.
• Support the development and Implementation of metrics and dashboards for reporting and monitoring the effectiveness of the IT data protection program.
• Completes other duties as assigned.

What you’ll need 

• Bachelor’s degree in computer science, information Technology, Data Science, or related fields. 
• 4+ years of experience in a Data Protection or Privacy role or Cybersecurity with a focus on data protection.
• Experience with regulatory compliance frameworks such as GDPR, CCPA, HIPAA, PCI DSS, ISO 27001, SOX, NIST CSF, etc. Ability to support IT assessment and audit efforts is a strong bonus.
• Experience performing Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
• Experience responding to and adhering to Data Subject Access Requests (DSARs).
• Experience implementing privacy design into information systems and recommending appropriate technical design to adequately protect data.
• Experience supporting privacy training and privacy compliance activities.
• Excellent communication and partnering skills. 
• Ability to build a strong data protection and privacy culture mindset framed by risk management and operational consistency across technical teams and business units.
• Good project management, multitasking and organizational skills.
• Relevant certifications such as CIPP, CIPT, CIPM, CDPSE, are highly desirable.
• Proficiency in Microsoft Excel, PowerPoint, Power BI and other Microsoft Tools.
• Good understanding of global privacy and data protection regulations and frameworks, such as the GDPR, CCPA, CPRA, HIPAA, NIST, ISO, and more.
• Experience with tools such as OneTrust, Securiti.ai, WireWheel, and BigID across use cases such as data mapping, data discovery, privacy impact assessments, consent/preference management, cookie compliance, data subject rights, and more, is preferred.
• Ability to clearly communicate data protection and privacy issues verbally on both a formal and informal basis to all levels of the organization.