Cybersecurity Analyst - Compliance GDPR

                    

At Cleveland Clinic Health System, we believe in a better future for healthcare. And each of us is responsible for honoring our commitment to excellence, pushing the boundaries and transforming the patient experience, every day.

                        

We all have the power to help, heal and change lives — beginning with our own. That’s the power of the Cleveland Clinic Health System team, and The Power of Every One.

                                    

Job Title

Cybersecurity Analyst - Compliance GDPR

                        

Location

Cleveland

                    

Facility

Remote Location

                     

Department

Cybersecurity Assurance-Information Tech Div

                      

Job Code

T98514

                     

Shift

Days

                       

Schedule

8:00am-5:00pm

                       

Job Summary

                         

Job Details

Join the Cleveland Clinic team where you will work alongside passionate caregivers and make a lasting, meaningful impact on patient care. Here, you will receive endless support and appreciation while building a rewarding career with one of the most respected healthcare organizations in the world.       

Performs all necessary duties to ensure the organization’s adherence to data protection and privacy regulations, with a primary focus on the General Data Protection Regulation (GDPR). This position is responsible for identifying and addressing compliance gaps, supporting the completion of Data Protection Impact Assessments (DPIAs), managing Data Subject Access Requests (DSARs), and driving continuous improvement of the cybersecurity and privacy compliance program. The analyst will collaborate across departments to promote a culture of compliance and safeguard the integrity of the organization’s data assets. 

A caregiver in this position works remotely Monday - Friday 8:00am—5:00pm EST.   

A caregiver who excels in this role will:    

• Ensure organizational compliance with GDPR and other applicable data protection regulations by assessing controls, identifying deficiencies, and coordinating remediation efforts. 

• Lead or support the completion of Data Protection Impact Assessments (DPIAs) and similar evaluations to identify, document, and mitigate data privacy risks across business processes and systems. 

• Oversee the intake, coordination, and fulfillment of Data Subject Access Requests (DSARs), ensuring timely and compliant responses in accordance with regulatory standards. 

• Contribute to the development, implementation, and maintenance of data protection policies, standards, and procedures. Recommend and implement program enhancements to strengthen privacy governance and cybersecurity maturity. 

• Partner with Information Security, Legal, Compliance, and IT teams to align operational practices with regulatory obligations and data protection best practices. 

• Support the design and delivery of privacy and cybersecurity awareness initiatives to promote understanding of GDPR requirements and secure data handling practices across the organization. 

• Maintain documentation and reporting on compliance activities, risk findings, and mitigation progress. Support internal and external audits or regulatory inquiries as required. 

• Monitor evolving data protection regulations, industry trends, and best practices to proactively identify opportunities to improve the organization’s compliance posture and maturity. 

• Provide support for broader cybersecurity and compliance initiatives to advance the organization’s overall security objectives. 

• Other duties as assigned 

 

Minimum qualifications f