Senior Privacy Analyst

As one of the world’s leading asset managers, Invesco is dedicated to helping investors worldwide achieve their financial objectives. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world.

If you're looking for challenging work, smart colleagues, and a global employer with a social conscience, come explore your potential at Invesco. Make a difference every day!

Job Description

Key Responsibilities / Duties:

• Identify evolving privacy requirement and risks inherent in Invesco's operations and in the development of new products and services
• Assist with the design and implementation of company-wide privacy policies, processes, and procedures
• Assist business functions with the design of function-level privacy processes, procedures, and controls
• Support maintenance (by data owners) of an inventory of personal data processing. Educate the data owners on their responsibilities (what is personal data, how is it used, who has access to it, documentation required, etc.)
• Promote activities to foster privacy awareness within the organization and related entities
• Support training activities to ensure that employees are well-informed on key privacy issues
• Support staff and project management on conducting Privacy Impact Assessments including privacy risk analysis and mitigation
• Assist in privacy compliance reviews, including relating to third parties where applicable
• Assist with investigations into privacy incidents, breaches and complaints
• Assist with the management of data subject rights and requests, and ongoing tracking and monitoring of such processes and requests
• Proactively maintain current knowledge of applicable privacy regulations, laws and accreditation standards, and monitor advancements in privacy
• Other duties as assigned

Work Experience / Knowledge:

• At least 5 years of experience working directly in the area of privacy.
• Demonstrable knowledge and understanding of global privacy legislation (e.g. GDPR, UK GDPR, CCPA, GLBA, PIPEDA, notice of breach laws, etc.)
• Experience using and configuring OneTrust, or similar enterprise privacy management systems
• Experience on privacy considerations of cloud platforms, artificial intelligence, digital marketing or data analytics.
•  Demonstrable ability to translate privacy regulations and/or standards into workable and implementable solutions
• Understanding of the financial services industry (preferred)
•  Building and managing relationships at various levels of the organization
•  Working in large / global corporate environments involving multiple businesses
•  Strong understanding of audit/risk management methodologies and regulatory requirements pertaining to privacy and/or data
•  Experience working with staff from external support organizations (e.g. consultancy firms)
• Risk identification, assessment, response and mitigation planning, and reporting
•  Project management experience desired
•  Collation of material for reporting (including developing relevant metrics)
•  Self-starter with entrepreneurial spirit; hands-on and quick decision-maker
•  Strong communicator and presenter (written and verbal, including to large or formal audiences)
•  Ability to translate complex/technical topics into business language and to articulate points in terms widely understood
•  Strong analysis and assessment skills to evaluate risks and recommend action based on fact
•  Strong conceptual thinking and communication skills - the ability to conceptualize complex business and technical requirements into comprehensible models and templates
•  Collaborative style to engage effectively with all personalities and across functional disciplines and to build strong working relationships
•  Ability to plan and deliver projects
•  Good crisis management skills

Skills / Other Personal Attributes Required:

• To have, or to be working towards, certification in privacy (e.g. CIPP/E, CIPP/US, CIPM, CISM or equivalent)

Formal Education:

• Degree in Law, Data Protection/Privacy, Data or Computer Science is preferred or commensurate relevant work experience.

Full Time / Part Time

Full time

Worker Type

Employee

Job Exempt (Yes / No)

YesWorkplace Model

At Invesco, our workplace model supports our culture and meets the needs of our clients while providing flexibility our employees value. As a full-time employee, compliance with the workplace policy means working with your direct manager to create a schedule where you will work in your designated office at least three days a week, with two days working outside an Invesco office. 

The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time.

Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.