Role: Cloud Privacy Risk & Compliance Manager (PRCM) LOA Coverage
Experience :15+years
Contract:C2C/1099
Location: Remote
Summary :
Role to be filled by a 3rd Party Privacy Risk & Compliance SME Consultant
Work alongside Safeguard Owners (SGO) and Control Objective Owners (COO) during the FTC external assessment to provide subject matter guidance (i.e., guidance on interacting with the external assessors) and technical support (e.g., uploading documentation and responses to various Client systems)
Act as the primary point of contact and compliance subject matter advisor for SGOs, COOs, and BPGs to assist in driving and/or enabling awareness, coordination, and collaboration for the Compliance Management team's processes alongside relevant Client-identified process owners / supporting teams
Review and provide feedback for SGO and COO activities related to NSD, Safeguard Change Management, Issue Management, MAPs, SET, and Certifications
Assist Client with project management efforts designed to track and enable domain and/or BPG completion of Compliance Management team's processes
Identify opportunities to enhance PRCM-related processes and share the recommendations
Top 3 must-have HARD skills:
(Security or Privacy related) Governance, Risk & Compliance experience - 3+ years
Worked with regulatory auditors in the past
Strong written and verbal communication skills
Good to have skills:
Cloud (AWS, GCP, Azure) Security or Privacy Risk Management experience - 3+ years
Prior audit experience with technical controls (e.g. automated / programmatic/code-based controls) in a tech company
Program management experience across large, complex technology initiatives
Experience building and managing technical security or privacy controls
Legal experience on regulatory and/or technical litigation matters (does not have to be an attorney or possess a JD)
Desired Certification (at least one): CISA/CRISC/CISM (ISACA), CIPP or similar (IAPP), CISSP (ISC2)
Story Behind the Need – Business Group & Key Projects:
Cloud Privacy is a critical privacy focus areas for Client as part of the 2020 FTC Order which was issued largely due to lack of maturation of our cloud environment. Cloud continues to be a highly scrutinized area and one of the largest within the Privacy Program encompassing controls related both to contractual engagements
Key Projects largely revolve around maintaining Clients' compliance with the FTC Consent Order and other global privacy regulations including:
· Manage Cloud execution for Mandated Privacy Program (MPP) workstreams including Safeguard issue management, change management, Annual Program Evaluation & Adjustment (APPEA), Certifications, and Safeguard Effectiveness Testing (SET)
· Support External Assessor testing response, communication and Management Action Plan (MAP) creation/execution
· Perform 2LOD oversight and monitoring of Safeguards to ensure they are operating in a compliant and effective manner
· Advise 1LOD business teams on governance, risk, and compliance related matters for Cloud Privacy
Compelling Story & Candidate Value Proposition:
Cloud is a critical privacy space for Client as part of the 2020 FTC Order which was issued largely due to inadequacies in the oversight over third parties who were receiving user data from Client. Our work ranges from contracts-related controls to highly technical, automated Safeguards which protect the User Data. Cloud has an extensive cross-functional set of stakeholders to engage with daily including other program teams, legal, engineering, product management, and data engineering teams. The work and challenges will vary day to day for each Safeguard (control). This team is high performing and provides a wide variety and volume of support to our stakeholders.
Typical Day in the Role:
A typical day for a Cloud Privacy Assurance & Compliance Team (PACT) member includes:
· Provide advisory, oversight, monitoring and operational support for Cloud Safeguards
· Identify, assess and drive remediation with XFN groups of privacy compliance risks related to third party data sharing with stakeholders
· Provide effective challenge and feedback to 1LOD on issues related to their safeguards, and privacy risks pertaining to their environment
· Create new Cloud Safeguards in collaboration with business and privacy program teams
· Create / maintain process documentation and evidence as needed
· Attending/organizing meetings with stakeholders to discuss Cloud Safeguard related actions. Meetings are expected to include an agenda, minutes and action item follow-up
· Communicating in both synchronous and asynchronous methods. Work happens via multiple simultaneous chat sessions and Workplace posts in addition to meetings
· Escalating to management when blocked or delayed
How will performance be measured:
Typical performance measures for the team include
· Completion of agreed upon tasks/goals on time
· Positive feedback from XFN partners / stakeholders on interactions, communications, and outcomes
· % on-time completion of issue and Management Action Plan (MAPs) remediation (timeliness)
· % Assessor accepted MAPs at score of 4 or 5 (quality)
# of Workplace posts with high levels of engagement
#J-18808-Ljbffr
