Sr. Privacy Compliance Analyst

The next part of your journey is right around the corner — with The Standard.

A genuine desire to make a difference in the lives of others is the foundation for everything we do. With a customer-first mindset and an intentional focus on building strong teams, we’ve been able to uphold our legacy of financial stability while investing in new, innovative technologies that support the needs of our customers. Our high-performance culture focused on operational excellence thrives thanks to remarkable people united by compassion and a customer-first commitment. Are you ready to make a difference?

Job Summary:

The Senior Privacy Compliance Analyst serves as the subject matter expert and point of contact for privacy incident response and incident handling across the organization. This role leads the intake, investigation, risk assessment, notification, and resolution of privacy incidents, while monitoring and interpreting evolving privacy and data protection requirements and translating regulatory obligations into practical business processes, guidance, and controls.

This role partners with legal, information security, IT, product, operations, claims, and service teams to ensure privacy incidents are promptly identified, escalated, investigated, contained, and remediated in compliance with applicable legal, regulatory, and contractual requirements.

Key Responsibilities:

• Incident Response & Management: Lead and coordinate the end-to-end response to privacy incidents, including intake, triage, investigation, containment, remediation, and closure. Ensure timely escalation to appropriate stakeholders and leadership and maintain accurate incident records and reporting.

• Incident Risk Assessment & Notification: Assess the scope and risk of incidents and determine whether they trigger regulatory, contractual, or individual notification obligations under applicable federal and state requirements. Draft and coordinate notifications to affected individuals, regulators, and business partners within required timeframes.

• Root Cause Analysis & Remediation: Conduct root cause analysis of incidents, identify control gaps and trends, and recommend and track corrective and preventive actions to completion in alignment with regulatory requirements.

• Business Partnership & Advisory: Provide subject matter expertise and consultative guidance to business units, legal, and information security on incident handling and privacy compliance, including incidents involving third-party vendors. Research complex questions using internal and external resources.

• Policy, Process, & Documentation Development: Draft, update, and maintain and improve incident response policies, procedures, playbooks, job aids, training materials, and compliance guidance to support consistent and compliant incident handling.

• Regulatory Monitoring & Industry Interaction: Monitor, analyze, and interpret privacy, data protection, and breach notification laws and regulations, and communicate business implications to stakeholders. Participate in industry forums and meetings to monitor incident response trends and develop and maintain productive working relationships with industry contacts.

• Audit & Regulatory Support: Support internal audits, regulatory examinations, and regulator inquiries related to privacy incidents by organizing documentation, responding to inquiries, and assisting with corrective action plans. Deliver training, presentations, and guidance on incident reporting and response requirements and emerging regulatory trends.

• Privacy Metrics, Reporting & Trend Analysis: Develop and maintain privacy incident metrics, trend analyses, and reporting to identify recurring risks, evaluate response effectiveness, and support continuous improvement of the privacy compliance program.

• Privacy Controls and Process Improvement: Identify opportunities to strengthen privacy controls, operational procedures, and preventive measures based on incident findings, regulatory developments, and emerging privacy risks.

Skills and Background You’ll Need:

Education: Bachelor’s degree or equivalent experience (business, legal, or related field preferred)

Certification: Professional certifications in privacy, compliance, or security (e.g., CIPP/US, CIPM, CISSP, or similar) (preferred)

Experience: 

• 4–6+ years of privacy, fraud, information security

• Demonstrated experience handling privacy and security incidents from intake through investigation, risk assessment, notification, and closure, with the ability to translate complex regulations into practical guidance.

• Proven ability to manage complex work, assess risk, and meet deadlines in a detail-oriented, time-sensitive environment.

• Basic knowledge of federal and state privacy, data protection, and breach notification requirements.

• Experience coordinating incident response with information security, legal, and third-party vendors, including managing regulator inquiries following an incident. (preferred)

• Experience developing playbooks, training materials, and compliance guidance. (preferred)

Key Behaviors of a Successful Candidate:

Winning Together: Excellent verbal and written communication skills with the ability to build trust and effective partnerships with both internal and external stakeholders. Fosters teamwork, maximizes efficiencies, and works to promote collaboration and delivery of exceptional customer experiences.

Driving success: Ability to manage competing priorities, work autonomously, and exercise judgement and discretion in making decisions, including in time-sensitive incident situations, to meet deadlines and stakeholder expectations. Strong analytical, critical thinking, and problem-solving capabilities that bring ideas to life and drive continuous improvement to take us “next level”.

Customer Focus: Partner cross-functionally to provide creative solutions to meet customer objectives while maintaining compliant processes and controls.

#LI-DNI

We have built an enduring legacy of stability, financial strength and exceptional customer service through the contributions of the service-oriented people who choose to work at The Standard. To ensure we can attract and retain the best talent, when you join The Standard you can expect:

• A rich benefits package including medical, dental, vision and a 401(k) plan with matching company contributions

• An annual incentive bonus plan

• Generous paid time off including 11 holidays, 2 wellness days, and 8 volunteer hours annually — PTO increases with tenure

• A supportive, responsive management approach and opportunities for career growth and advancement 

• Paid parental leave and adoption/surrogacy assistance

• An employee giving program that double matches your donations to eligible nonprofits and schools

In addition to the competitive salary range below, our employee-focused benefits support work-life balance. Learn more about working at The Standard.

• Eligibility to participate in an incentive program is subject to the rules governing the program and plan. Any award depends on a variety of factors including individual and organizational performance.

The actual compensation for this role will be based on a combination of education and experience, knowledge and skills, position budget, internal equity, and market data.

Salary Range:

Standard Insurance Company, The Standard Life Insurance Company of New York, Standard Retirement Services, Inc., StanCorp Mortgage Investors, LLC, StanCorp Investment Advisers, Inc., and American Heritage Life Insurance Company and American Heritage Service Company, marketed as The Standard, are Affirmative Action/Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, national origin, gender identity, sexual orientation, age, disability or veteran status or any other condition protected by federal, state or local law. Except where precluded by state or federal law, The Standard will consider for employment qualified applicants with arrest and conviction records pursuant to the San Francisco Fair Chance Ordinance. The Standard offers a drug- and alcohol-free work environment where possession, manufacture, transfer, offer, use of or being impaired by an illegal substance while on The Standard's property, or in other cases which the company believes might affect operations, safety or reputation of the company is prohibited. The Standard requires a criminal background investigation and employment, education and licensing verification as a condition of employment. After any conditional offer of employment is made, the background check will include an individualized assessment based on the applicant’s specific record and the duties and requirements of the specific job. Applicants will be provided an opportunity to explain and correct background information. All employees of The Standard must be bondable.