Corporate Counsel - Privacy

Job Type:

Build a brilliant future with Hiscox
 

About Hiscox

As an international specialist insurer we are far removed from the world of mass market insurance products. Instead we are selective and focus on our key areas of expertise and strength - all of which is underpinned by a culture that encourages us to challenge convention and always look for a better way of doing things.

We insure the unique and the interesting. And we search for the same when it comes to talented people. Hiscox is full of smart, reliable human beings that look out for customers and each other. We believe in doing the right thing, making good and rebuilding when things go wrong. Everyone is encouraged to think creatively, challenge the status quo and look for solutions.

Scratch beneath the surface and you will find a business that is solid, but slightly contrary. We like to do things differently and constantly seek to evolve. We might have been around for a long time (our roots go back to 1901), but we are young in many ways, ambitious and going places.

Some people might say insurance is dull, but life at Hiscox is anything but. If that sounds good to you, get in touch.

The Role:

Reporting to the Head of Legal, the Corporate Counsel, Privacy serves as a key member of the legal team and will own and run data privacy operations for Hiscox US.

The right candidate has a proven background advising, owning, and operating a data privacy framework, and experience in developing, implementing, and managing the business processes and practices necessary to drive compliant privacy transformation initiatives and BAU operations simultaneously. This role will partner with the Group DPO and Privacy global team to ensure the US business maintains an effective program that is compliant with US privacy and data security laws and regulation and is responsible for keeping abreast of all emerging laws, regulations and communicating expected impact and recommending solutions to the business and management. This role will serve as the point person for US customer queries and will ensure all necessary and relevant privacy trainings and tools are effectively delivered to the US business. Additionally, the individual will collaborate closely with key stakeholders in Data, Risk, Claims, Operations, and Marketing to drive compliance and best practices. This role is suited to an experienced privacy professional who is comfortable taking decisions and operating as part of an embedded legal function and simultaneously part of a global privacy team.

This role will be a member of the US legal team, providing day to day legal advice and counselling to the business regarding marketing initiatives, contract negotiations, and data incident management.

Key Responsibilities:

• Lead Privacy initiatives within the US:
  • Simultaneously run the annual US privacy program and BAU responsibilities for a leading specialist commercial insurer with growth plans in the US market.
  • Lead on the development and own the US privacy roadmap, delivering through others in Digital, Data, IT and Marketing where required.
  • Drive the development of US adherence to Group data protection and privacy policies, standards and guidelines that are consistent with US state legal and regulatory requirements.
  • Be the escalation point for US customer queries on privacy and the exercising of their rights and escalation point for teams managing these processes.
  • Manage, triage, and escalate any data incidents – actively promoting an open reporting culture with awareness and communication initiatives.
• Advice and Counselling:
  • Research and advise the business on current and developing regulatory and legal changes that will or may affect the business; timely communicate and provide solutions.
  • Support stakeholders with the appropriate uses of personal and consumer data within Hiscox for new products, services, marketing, and changes to our business.
  • Run, support, and approve Data Privacy Impact Assessment (DPIA) processes for the US business. Raise awareness and drive best practice in completion of the DPIA processes.
  • Maintain an existing data processing inventory including an annual refresh campaign, drawing insight and reporting results to Management.
  • Provide ad hoc guidance and support for privacy and customer data related queries.
  • Work with the Learning and Development teams to produce and enhance privacy training programmes and communications
  • Collaborate with an international network of Hiscox Privacy experts.
• Involvement in related data initiatives and business projects:
  • Collaborate with the Data team on process reviews and advisory work to ensure the compliant u