Data Privacy Analyst

Primary Purpose
Supports Legal Compliance with implementation of the Data and Information Management Program, including data privacy, cybersecurity compliance, information management, intellectual property and confidentiality and other general compliance duties relevant to the Code of Business Conduct. Ensures compliance with applicable data privacy laws and regulations. Supports activities around data governance, protection, privacy, classification and security.

Duties and Responsibilities

• Assists with implementation of the Data and Information Management and Cybersecurity Compliance Programs, including engagement with cross-functional and cross-company stakeholders to understand data usage needs, evaluate regulatory privacy requirements and develop business controls and solutions. Develops and maintains data privacy policies and procedures.
• Conducts privacy impact assessments, data transfer impact assessments and data protection assessments. Develops and produces assessment reports and tracks related metrics.
• In conjunction with IT, ensures data mapping is conducted and maintained, and incident management and regulatory reporting is timely and complete.
• Conducts privacy risk assessments and develop internal controls. Embeds privacy principles into vendor/project risk assessment processes. Ensures records of processing are tracked.
• Develops data privacy training and communications. Collaborates with relevant business personnel to administer training and training records.
• Manages intellectual property compliance, including policies, training and internal controls.
• Supports information management administration.
• Supports confidentiality compliance, including policies, training and internal controls.
• Drafts presentations and reports regarding progress on team goals and initiatives.
• Adheres to Sempra Code of Business Conduct and all company policies and procedures. Completes all required training, disclosures and other company requirements for employees.
• Performs other duties as assigned (no more than 5% of duties).

Education

• Bachelor's Degree in Information Technology, Cybersecurity, Law or Business Administration preferred; other majors considered required

Experience

• 3 years of experience in a data privacy role within a large company or other professional services organization required

Knowledge, Skills and Abilities

• Expertise using technologies for document management, matter management, electronic billing, electronic signature, MS-Office, SharePoint, Power Platform, etc.
• Ability to adapt to change and work to integrate processes, and continuously improve the way the Compliance and Risk department works and uses technology.
• Communication skills including written and verbal, including remote meetings via Teams.
• Computer skills and knowledge of Microsoft Office Business Suite.
• Knowledge of elements of effective corporate compliance programs.
• Event planning and administration skills.
• Initiative, influence without authority and relationship building.
• Knowledge of data privacy laws and regulations (GDPR and CCPA), information protection and compliance frameworks.
• Knowledge of business processes and industry norms.
• Problem-solver with demonstrated ability to facilitate discussions between all levels and must be comfortable working with entry level staff to senior executives.

Licenses and Certifications

• Certified Information Privacy Professional (CIPP), Certified Information Privacy Technologist (CIPT) or Certified Information Privacy Manager (CIPM) preferred.

Other Qualifications

• Ability to occasionally travel in the U.S. and Mexico.

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled