About The Role
We are looking for a colleague to join our Global Security, Privacy, and Resilience Services team.
The goal of the team is to support the entire global Morningstar business, break down silos between the different functional areas, and improve customer service for internal stakeholders.
The role is responsible for analyzing data collected from various cybersecurity defense tools to mitigate risks and partner with relevant stakeholders to support remediation operations.
Job Responsibilities
- Respond to customer Privacy questionnaires.
- Perform Third Party Vendor Reviews for potential Privacy risks.
- Work and communicate with broad range of global employees and provide support for any interactions with the Privacy teams.
- Serve as information privacy liaison to technology system users.
- Oversee and implement client's information access rights.
- Create privacy training materials, prepare privacy awareness communications and deliver privacy awareness orientations.
- Develop and maintain privacy and confidentiality information notices.
- Monitor advancements in information privacy technologies.
- Integrate privacy considerations in organizational programs, policies, and procedures.
- Determine if new and existing products comply with privacy and data security obligations.
- Review and maintain privacy and confidentiality consent forms.
- Train, mentor and guide junior colleagues.
Qualifications
- Verbal and written English skills at a professional level.
- Previous experience in data privacy (3+ years).
- Strong communication skills.
- Enthusiasm to learn and gain hands-on experience across different security domains.
- Demonstrate knowledge of information privacy technologies.
- Have knowledge of risk management processes.
- Knowledge of privacy laws and regulations.
- Experience with review of privacy policies and procedures.
- Proven experience of Privacy Impact Assessment (PIA) principles and practices.
Nice to have
- Skill in developing privacy curricula.
- Skill in developing standard operating procedures (SOPs).
- Knowledge of security controls.
- Skill in aligning privacy and cybersecurity objectives.
Morningstar's hybrid work environment gives you the opportunity to work remotely and collaborate in-person each week. We've found that we're at our best when we're purposely together on a regular basis, at least three days each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.
315_Sustainalytics SRL Legal Entity
Top Skills
What We Do
At Morningstar, we believe in building great products in-house in a highly collaborative, agile environment where we focus on technical excellence, the user experience, and continuous improvement. Our technologists represent a range of skills and experience levels, but they all view their work as a craft and push technology’s boundaries.
Why Work With Us
Imagining big things is in our blood -- it's transformed us from a company with just a few employees in 1984 to a leading independent investment research company with a worldwide presence today. As of April 2020, we acquired Sustainalytics to drive long-term meaningful outcomes for investors in the ESG space. Join us on this exciting journey!
Gallery






Morningstar Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.