Privacy Incident Management AVP

Job Description

Incident Management Officer, AVP State Street seeks an Incident Management Officer, Asst. Vice President (AVP), in the Privacy Office to serve as one of the principal points of contact within the Privacy Office for the investigation and management of data incidents involving personal data across the globe. In addition, the AVP will be responsible for helping to manage the Privacy Office s India based staff and will collaborate on other privacy projects and initiatives.The AVP will work closely with the Global Incident Management Team, Legal, Corporate Information Security, IT, Global Security, Local Privacy Compliance Officers, Designated Privacy Liaisons, Compliance Managers, and other business leaders in the management of data incidents involving personal data. In addition, the candidate will work directly with the Chief Privacy Officer and other Privacy Office staff, on local, global, and regional projects and issues. Moreover, the AVP will participate in compliance risk management projects and activities and may have direct contact with regulatory agencies, internal and external advisors, and other internal control groups on data event and other compliance-related issues. The AVP will help lead and participate in investigations of data incidents and compliance with regulatory initiatives relating to data privacy and maintain electronic records of each data incident.The AVP will report to the Head of the Privacy Office s Incident Management Team and provide support to the Chief Privacy Officer, as needed.To that end the AVP will have the ability to:

• Think strategically and tactically about a range of privacy and data protection issues, particularly as it relates to data event investigations;

• Develop and maintain policies and procedures, to complement existing policies and procedures, relating to the prevention and management of data events as they relate to personal data

• Interact with senior management, Global Security, CIS and Legal, regarding privacy and data protection issues;

• Identify, escalate, and analyze data events, participate on data event and incident response team investigation calls, identify facts to be determined and, at times, investigate and pin them down, identify tasks to be accomplished, follow-up re status with those responsible, and offer to help when needed, keep detailed notes and be able to provide precise status of matters, and provide and update reports and status logs of data events regularly;

• Conduct monthly, quarterly and annual analysis of data event trends and root causes and draft management reports

• Maintain the data event log and ensure log entries are accurate and complete

• Provide privacy leadership, oversight, and coordination during data events involving personal data across North America, EMEA and APAC by coordinating with Regional Privacy Officers, Local Privacy Compliance Officers, Designated Privacy Liaisons, Compliance Managers and other business leaders as needed;

• Review and add meaningful substance to policies, guidelines, and procedures;

• Collaborate with other Privacy Office staff on issues of mutual interest and concern, to provide coverage where necessary, to provide help where necessary, or to respond as otherwise directed by the Chief Privacy Officer or other Privacy Office manager;

The ideal candidate will have most or all of the following attributes:

• Legal degree

• Prior experience in investigating and handling possible data breaches involving personal data a plus

• A demonstrable interest in privacy, data protection and information security issues

• IT / information security and audit background a plus

• Ability to manage multiple priorities while maintaining attention to detail

• Strong communications, project management, presentation, and organization skills

• Strong organizational, analytical and problem solving skills

• Prior experience managing staff

• Strong computer skills including Excel, Share Point, PowerPoint

• A minimum of 4 years related experience, including project management and compliance, risk management or audit experience

• Be a team player with a positive attitude and good sense of humor

• Have a desire to learn (or learn more) about data protection and privacy, and be willing to help other functions within the Privacy Office

,

Keyskills :
nternal control incident management compliance officers problem solving data privacy organization skills senior management regulatory agencies privacy compliance risk management project management computer skills