Location
Suwanee, GA | United States
Job description
Doxim is the customer communications and engagement technology leader serving financial and regulated industries. Our platform with its suite of integrated, SaaS software and document technology solutions helps clients digitize operations, improve efficiency, and modernize customer experience. With Doxim, clients can communicate reliably and effectively, improve cross-sell and upsell opportunities, and drive increased loyalty and wallet share through personalized omnichannel communications.
Doxim is looking for a Privacy Manager to maintain Doxim’s GRC program and ensure our company is compliant with the applicable Data Privacy Regulations, They will be responsible for risk management and data security for an organization that would include such security privacy framworks like General Data Protection Regulation (GDPR), SOC2, NIST, and the various United States Acts.
The Privacy Manager will report to the Director of Information Security. Responsibilities include overseeing Doxim’s information security governance and compliance efforts, maintaining the risk management program, advising on our compliance with privacy obligations, monitoring our adherence to GDPR standards and acting as a point of contact with supervisory authorities and data subjects. You will also create policies that enforce compliance with legislation and deliver privacy training to our staff to increase awareness of data protection measures. Compliance will be achieved by a holistic understanding of with local, state, and federal regulations and implementing a privacy program for the company to keep information safe.
To be successful in this role, you should have in-depth knowledge of Governance, Risk and Compliance, GDPR and local data protection laws and be familiar with the information security and privacy industries. You should also know how to perform audits and align them to our current procedures.
Ultimately, you will facilitate GDPR compliance through transparent data protection policies, systems and procedures.
- Identify, assess, and prioritize risks to the organization.
- Develop and implement risk mitigation strategies.
- Monitor and report on risk exposure to senior management.
- Develop and implement policies and procedures to ensure compliance with relevant laws, regulations, and industry standards.
- Communicate policies to employees and ensure understanding and adherence.
- Assist in external audits and client due diligence requests.
- Stay informed about relevant laws and regulations affecting the organization.
- Ensure that the organization complies with applicable legal and regulatory requirements.
- Conduct internal audits to assess compliance.
- Provide training to employees on compliance, risk management, and governance matters.
- Serve as the Data Protection Officer (DPO) if necessary, ensuring compliance with data protection laws.
- Oversee the organization's data protection and privacy policies and practices.
- Identify and evaluate the company’s data processing activities
- Provide advice and instructions on how to conduct Data Protection Impact Assessments (DPIAs)
- Participate in meetings with managers to ensure privacy by design at all levels
- Ensure we address all queries from data subjects within legal timeframes (e.g. delete their information from our databases)
- Write and update detailed guides on data protection policies
- Offer consultation on how to deal with privacy breaches
- Arrange for training on GRC and privacy related matters for employees
- Follow up with changes in law and issue recommendations to ensure compliance
- Prepare and present regular reports to senior management and relevant stakeholders on GRC activities, risks, and compliance status.
- Work closely with various departments, including legal, IT, finance, and operations, to ensure a holistic approach to GRC.
- Continuously assess and improve GRC processes and programs.
- Stay updated on industry best practices and evolving regulatory requirements
Prefer to Have:
- 8-10 years work experience
- Experience in Governance, Risk and Compliance
- Educated in relevant field
- Experience in data protection and legal compliance
- Work experience in data protection and legal compliance is a plus
- Solid knowledge of GDPR and national data protection laws
- Knowledge of data processing operations in the company’s sector is preferrable.
- Familiarity with computer security systems
- Ability to handle confidential information
- Ethical, with the ability to remain impartial and report all non-compliances
- Organizational skills with attention to detail
Doxim company encourages applications from all qualified individuals. Applicants with disabilities may notify us of any accommodations needed to support your participation in the recruitment process. We wish to thank all applicants for their interest and effort in applying. Please be aware that only candidates selected for interviews will be contacted for this position.
EOE/M/F/Disabled/Vets
Doxim is an equal opportunity employer and makes employment decisions without regards to race, gender, disability or protected veterans status.
Job tags
Salary
