Privacy and Data Protection Manager (Hybrid)

We are a Firm where people truly believe in what they do and strive to achieve the highest standards of performance and success.

General Description:

The Privacy and Data Protection Manager will be responsible for improving the Firm’s Data Loss Prevention (DLP) program, conducting and overseeing data egress investigations, supporting the Firm’s privacy incident and privacy breach response plans, and improving our data protection controls strategies. This role requires Data Loss Prevention (DLP) program experience, including conducting investigations related to data loss, data exfiltration, or unauthorized access or use of data, or experience using eDiscovery solutions or similar technology. The Privacy and Data Protection Manager requires an IT or law firm background, strong investigative and analytical skills, and enjoy working in a fast-paced environment.

Key Responsibilities and Essential Job Functions:

• Continuous improvement of data loss prevention controls and strategies designed to protect confidential information in compliance with our legal, regulatory and client contractual obligations.
• Respond to data egress incidents, conduct data loss investigations, and develop and implement corrective action or training plans, as needed.
• Prepare metrics plans and reporting on the DLP program.
• Develop incident reporting for senior management.
• Improve existing investigation policies, processes and procedures.
• Provide reporting and notification support for privacy-related incidents and breaches, including working with relevant key stakeholders in senior management, and internal/external privacy counsel.
• Ensure compliance standards, practices, and internal controls are appropriately documented and adhered to.
• Support the Privacy and Compliance Program’s communication and awareness campaigns, including the identification of training requirements and relevant topics.
• Conduct compliance risk assessments, develop mitigation or corrective action plans, and communicate and escalate identified risks, as necessary.
• Support vendor risk management and DPIA programs to ensure third parties comply with the Firm’s privacy and data protection requirements.
• Facilitate compliance risk mitigation efforts by providing monitoring and oversight of remediation efforts to support ongoing compliance.
• Support the Firm’s Integrated Risk Management (IRM) program.
• Provide monthly updates and reporting for the Privacy Information Management System (PIMS) Council.
• Support the program’s audits and evidence collection processes.
• Special project and duties as assigned.

Required Qualifications & Education:

• 5+ years of professional experience (IT, law firm, and/or investigation role experience required).
• Knowledge and understanding of data handling practices, privacy and data protection principles or data governance required.

Preferred Qualifications & Education:

• Prior experience using Microsoft-based tools is preferred.
• Industry standard certification, such as Certified Information Privacy Professional (CIPP) or Certified Information Privacy Manager (CIPM) or similar certification is preferred.

Physical Requirements:

• Ability to sit or stand for extended periods of time.
• Moderate or advanced keyboard usage

This position may be filled in the District of Columbia, New York, Colorado and California. In accordance with the District of Columbia Wage Transparency Law, New York State Pay Transparency Law, New York City Human Rights Law, the Colorado Equal Pay Act, and the California Pay Transparency Law, the pay range for this position in the District of Columbia is $121,300k - $181,900k/yr, in New York State is $105,400k - $189,800k/yr, in New York City is $126,600k - $189,800k/yr, in Colorado is $110,700k - $166,100k/yr, and in California is $121,300k - $197,800k/yr. These ranges are specific to these locations and may not be applicable to other locations. An individual's actual compensation will depend on the individual's qualifications and experience.

Benefits: Our goal is to promote a work environment in which individuals have access to the resources they need to be at their best both professionally and personally, which includes resources that encourage individuals to focus on their health and well-being. Below is a list of just some of the benefits we offer: generous paid time off; eleven paid holidays per year; time off for bereavement or jury duty; paid leave for new parents; comprehensive medical (PPO and HDHPs), dental and vision plans including coverage for domestic partners; life and AD&D insurance; short and long term disability insurance; tax-advantaged accounts for health care expenses, including FSA or HSA; FSA for dependent care; supplemental AFLAC policies for medical care; excess liability coverage; health advocacy services; behavioral health and counseling resources for all family members; 401(k); profit sharing; pre-tax transit and parking program; backup care for children and adults; senior care planning support; and resources for individuals with development disabilities and their caregivers.

Benefits may vary by position and office.

Holland & Knight is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity Employer, making decisions without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability status, age, marital status, protected veteran or any other protected class.

Personal Information collected from applicants will be used for the purpose of processing the application throughout any recruitment or employment process, as well as inclusion in a personnel file. Categories of data collected may include name, address, phone numbers, email, Social Security Number, and signature. Holland & Knight may collect further information if you consent to a background check. This includes criminal background, employment, and certifications. Please visit Legal Information Portal for Holland & Knight LLP’s privacy policies.