Privacy and Confidentiality Analyst, Apac

2 years exp

**Roles & Responsibilities**

**POSITION PURPOSE**

The Privacy and Confidentiality Analyst will serve as an internal expert resource for privacy and confidentiality risk and compliance. Overall, you will support T. Rowe Price’s Global Privacy team in day-to-day privacy and confidentiality risk and compliance activities partnering with business, legal, and technology stakeholders. You will be responsible for supporting privacy impact assessments to ensure proper privacy controls are applied and delivering guidance to ensure the outcome of new projects is consistent with T. Rowe Price’s data protection principles and expectations.

**PRINCIPAL RESPONSIBILITIES**

Sustaining the Privacy by Design (PbD) program and privacy impact assessments, including:

- Driving privacy impact assessment intake
- Conducting reviews of medium risk privacy impact assessments and reviewing remediation plans designed to mitigate risks
- Contribute to team process improvements
- Creating and maintaining required documentation

Ongoing maintenance of Records of Processing (RoPs), including:

- Leading the annual RoP review and update process
- Conducting RoP assessments for net new processing activities
- Fostering good relationships with business stakeholders by managing expectations, clearly communicating requirements, accurately tracking agreed actions, and providing timely response to inquiries
- Reviewing and monitoring the execution of remediation plans designed to mitigate risks
- Contribute to process improvements in Archer eGRC tool
- Creating and maintaining required documentation

Support the APAC roll-out of privacy risk and compliance monitoring program, including:

- Risk assessment and compliance monitoring
- Ongoing remediation tracking
- Tracking and review of regional privacy and data protection/ cybersecurity laws and regulations
- Contribute to reporting on privacy to respective APAC Legal Entity Board Reporting and Senior Management Reporting
- Contribute to regular privacy metrics reporting and perform escalation on risk areas (where necessary)
- Gathering and maintenance of compliance documentation as part of standard record keeping requirements, and if audited or requested by regulator
- Advisory to global privacy network to answer inquiries and to support privacy compliance activities
- Contribute to the ongoing privacy program improvement efforts, including:

- Development and review of privacy training
- Development and review of privacy policy, procedures, standards, and guidance
- Respond to privacy policy and procedure inquiries
- Creating and maintaining required documentation
- Communicate with stakeholders regarding the most current personal data protection policies and clients’ confidentiality expectations
- Support APAC Lead Manager on the APAC DLP Block Policy Program, comprising of Business Unit Reviewer responsibilities and trend analysis

Support the handling of individual rights requests, complaints and data security incidents, including:

- Prepare materials to support incident response and mitigation to support prompt and accurate reporting as necessary
- Creating and maintaining required documentation

**PERSONAL ATTRIBUTES / SKILLS / QUALIFICATIONS**

**Required**:

- 2+ years of experience in privacy and data protection
- Demonstrated strong program management skills, including ability to deliver on multiple work streams in a resource-constrained environment
- Passion for privacy, data protection and technology
- Strong desire to communicate with internal clients and stakeholders regarding the importance of privacy and confidentiality as core values
- Strong commitment to maintaining good relationships through effective communication
- General understanding of enterprise-wide data flows
- Attention to detail
- Able to effectively communicate in English, in both written and oral forms
- Demonstrates proactiveness and the ability to work within a team

**Preferred**:

- IAPP certifications preferred (CIPP, CIPM, CIPT)
- Previous experience conduct privacy by design reviews/privacy impact assessments
- Previous experience managing multiple high priority projects and assignments simultaneously
- Previous experience working in the financial services industry and for a global organization

T. Rowe Price Group, Inc. is an American publicly owned global investment management firm that offers funds, advisory services, account management, and retirement plans and services for individuals, institutions, and financial intermediaries. The firm has assets under management of more than $1.6 trillion and annual revenues of $6.2 billion as of 2020, placing it 447 on the Fortune 500 list of the largest U.S. companies. Headquartered at 100 East Pratt Street in Baltimore, Maryland, it has 5,000 employees in Baltimore and 16 international offices serve clients in 47 countries around the world.