EY- GDS- Cybersecurity- Staff

at  EY

Microsoft Privacy Job description
Role description:
Looking for a business-minded Privacy Operations Analyst to work directly with the client and support the execution of the client’s privacy processes (e.g., privacy reviews, incident response, metrics and reporting); This role requires strong privacy and project management skills to manage privacy risk

Key Responsibilities:

• Privacy Reviews (50%) – Conduct end-to-end privacy reviews, including managing the review queue, leading and participating in meetings with the business to identify privacy risks, tracking progress, processing the review, etc.
• Incident Response (30%) – Support client in triaging new incidents, coordinating communications with the business, tracking ongoing incidents, maintaining incident response procedures and training material
• Knowledge Management (10%) – Support with the management and maintenance of the Privacy Operations Playbook, including developing content, documenting key learnings and decisions and the impacts to the team, and ongoing updates as needed based on current operations and decisions
• Metrics and Reporting (5%) – Support client in consolidating and reporting privacy risk metrics on a monthly basis from various sources
• Ad-hoc Requests (5%) – Assist the client with program enhancements, share thought leadership, etc.

Preferred Skills:

• Prior experience supporting operational privacy activities outlined above
• Strong understanding of privacy concepts, risks, and controls
• Strong project management, organizational, and time management skills to manage multiple activities independently and simultaneously across the pillars listed above
• Strong written and verbal business / technical communication skills
• Experience working closely with technical product and/or engineering teams
• Ability to identify opportunities to solve business problems
• Ability to apply critical thinking in evaluating different scenarios
• Ability to pay attention to quality and details
• Self-motivated, quick and eager learner
• CIPP, CIPT, CDPSE, or other privacy certifications

• Privacy Reviews (50%) – Conduct end-to-end privacy reviews, including managing the review queue, leading and participating in meetings with the business to identify privacy risks, tracking progress, processing the review, etc.
• Incident Response (30%) – Support client in triaging new incidents, coordinating communications with the business, tracking ongoing incidents, maintaining incident response procedures and training material
• Knowledge Management (10%) – Support with the management and maintenance of the Privacy Operations Playbook, including developing content, documenting key learnings and decisions and the impacts to the team, and ongoing updates as needed based on current operations and decisions
• Metrics and Reporting (5%) – Support client in consolidating and reporting privacy risk metrics on a monthly basis from various sources
• Ad-hoc Requests (5%) – Assist the client with program enhancements, share thought leadership, etc