Enterprise Data Privacy Analyst

Overview

To review and analyze Navy Federal's risk exposure related to data privacy and data usage. Support management in providing frameworks and recommendations for the ethical and responsible use of data and models across the enterprise. Understand regulatory data usage and privacy requirements and support the alignment of Navy Federal's business and data activities for those requirements. Operates independently with little guidance on day-to-day activities.

Responsibilities

• Support efforts to educate, train, and build awareness of evolving data privacy and data risk landscape with business lines to secure support in operationalizing compliance, foster privacy by design principles into the product lifecycle, and recommend frameworks to drive the ethical and responsible use of data and models across Navy Federal
• Support working partnerships with stakeholders such as Office of General Counsel, Compliance, Procurement and Vendor Management, Information Security, Enterprise Risk, Information Services, and Internal Audit to drive cross functional privacy risk mitigation
• Support management in identifying relevance and impact of regulatory developments, enforcement trends, and industry specific initiatives related to data privacy and risk
• Support 2nd line of defense in conducting Privacy Impact Assessments of Navy Federal systems and new and innovative processes, tools, and technologies
• In collaboration with Enterprise Risk and Compliance, assist in the development of controls to manage privacy risk, and act as advisor to business areas in implementing the controls
• In partnership with Procurement and Third-Party Risk Management, and the Office of General Counsel, track contracts involving data transfers between Navy Federal and external parties, and identify risks associated with contracts
• Support the process of identifying regulatory and contractual constraints on the usage of data in Navy Federal's enterprise data ecosystem with a particular emphasis on the usage of data obtained from external parties; assist in the coordination and gathering of input from Office of General Counsel, Compliance, and Procurement and Vendor Management
• Support management in interfacing with Internal Audit and external examiners in representing the Privacy Program, and assist in preparation of appropriate materials in response to examiner inquiries; support management in mitigating risks identified during privacy and data risk audits and exams
• Assist in benchmarking activities and the maintenance of policies, standards, and procedures related to privacy consistent with financial services laws, regulations, and best practices
• Continually improve knowledge of data privacy and data risk; complete continuing education to improve expertise in current and evolving privacy matters and maintain certifications
• Perform other duties as assigned

• Bachelor's degree in Business Administration, Information Management, Legal Studies, or related field, or the equivalent combination of education, training, and experience
• 1 to 3 years of related work experience in privacy and risk analysis
• Working knowledge of internal and external data flows and their impact to privacy
• Working knowledge and understanding of federal and state laws and regulations governing data privacy and protection
• Effective communication and analytical skills that demonstrate the ability to distill complex challenges into actionable solutions
• Effective skill communicating thoughts, concepts, practices effectively at all levels, adjusting as needed to a target audience
• Self-motivated and proactive, able to learn quickly and apply new concepts, tools, and applications
• Advanced organizational, planning, and time management skills

• Professional certification in Data Privacy, such as CIPP/CIPM preferred
• Proficiency in US federal and state privacy law and regulations applicable to financial institutions
• Working knowledge of Navy Federal functions, philosophy, operations, and organizational objectives preferred