Lead, Privacy Compliance

Guided by our company Purpose of “Inspiring well-being for our colleagues, consumers, and communities,” we are committed to building a best-in-class Law Department.

We drive a high-performance culture across our Legal, Compliance, and Government Affairs functions, aligned to “what” we deliver (i.e., our goals and objectives) and “how” we demonstrate our values and behaviors while focusing on the customer. We do this through leveraging a series of core capabilities, which includes accountability, interpersonal effectiveness, ability to demonstrate business savvy, being a subject matter expert, all while supporting the Law Department’s Mission to be a trusted advocate and advisor to drive strategic solutions that advance Guardian’s purpose, priorities, and values.

Do you want to be part of a collaborative Compliance/Legal Team?

As Lead, Privacy Compliance, you will support the day-to-day operations of Guardian’s Privacy Compliance Program, overseeing resources necessary to safeguard Guardian privacy information through the enforcement of Guardian’s privacy policies and procedures. You will be a central and critical role in the direction of privacy incident management, through the direct management and handling of suspected privacy incidents, in conjunction with the Privacy, Data Strategy and Security practice group, business-area Privacy Liaisons, and other internal and external stakeholders, as necessary.

You will also ensure the appropriate escalation of and clarify privacy-related deliverables throughout the enterprise, including regular engagement with Guardian’s senior management depending upon the nature of a given privacy incident. The ability to influence and drive proactive partnership in a changing business environment is critical. You will develop cross-business connections, provide industry perspective and best practices guidance while considering long-term outcomes and the needs of partners/clients when providing advice.

You will

• Plan and manage preparation of relevant Privacy Program reports, metrics, and briefings to senior management.

• Participate in privacy forums, build partnerships internally across Guardian, and help ensure that the protection of privacy is embedded in Guardian’s fundamental business practices and policies.

• Provide support to business areas, including Business-Area Privacy Liaisons, on privacy strategies and approaches to implement in their organizations.

• Assist in driving cross-functional engagement across the enterprise, including among senior leadership, to promote the protection of privacy.

• Oversee the process that supports the tracking of and response to privacy incidents across the company, ensuring the actions taken are consistent with company standards, policies, and procedures, as well as applicable law. This will include:

• Triage and analysis of suspected privacy incidents reported to the privacy team to ensure appropriate and immediate response.

• Oversee complex in-depth investigations of privacy incidents.

• Assist with breach notification efforts including coordination with outside resources.

• Maintain database(s) of privacy incidents.

• Support the executive-level information incident response team, which will include coordinating training to ensure readiness, as well as managing execution of incident response in accordance with Guardian’s Privacy Incident Response Plan.

• Function as a primary interface and escalation point between the Privacy, Data Strategy and Security practice group and business unit Privacy Liaisons who are responsible for assisting in management of the Privacy Program at the business level and ongoing compliance with existing privacy regulations and laws.

• Represent the Privacy, Data Strategy and Security practice group as a key advisor to stakeholders to establish, inform, and maintain company-wide privacy policies.

• Lead the development, rollout and management of privacy compliance assessments, privacy impact assessments and data inventory updates.

• Provide effective, prompt privacy compliance advice and support business units in operationalizing privacy compliance, rectifying problems, and responding to emerging challenges.

• Keep informed regarding pending industry changes, trends, and best practices and assess the potential impact of these changes on organizational processes.

• Manage and oversee enterprise rollout of annual privacy training.

• Manage and respond to data subject rights requests and customer privacy preferences.

Reporting Relationships

•                You will report to the Assistant General Counsel, Privacy who reports to the Associate General Counsel, P