Technology Compliance & Privacy Analyst

Manager Notes:

Manager strongly prefers candidates who are qualified lawyers with experience in U.S. law, as this background would be highly valuable for the role.

Suggested: Brazil, Colombia, Argentina.

Overview:

This contractor will support the Privacy & Technology Compliance Program. It will be focused on identification and analysis of privacy and other technology compliance risks across the ecosystem including AI, Open-Source, Cloud/SaaS/SASE application architecture, and other related evolving areas of global regulatory attention. This position will also manage legal documentation related to Records of Processing Activity, Data Mapping and Data Governance, Service Provider documentation, and other similar requirements.

You will use a tactical approach to increase visibility of privacy and other data and technology-related compliance concerns to reduce risks while enabling business initiatives across the ecosystem. This includes facilitating conversations with business partners to understand their needs and goals, potential risks, and how we can find an effective solution.

The Analyst works cross-functionally with the business, DTS (IT), and enterprise functions to identify risk and opportunities for mitigation. You would serve as a trusted advisor to partners in DTS and the business, at all levels of the organization. Strong communications skills are key, with the ability to communicate complex issues in clear non-technical language. You should be able to influence key business partners, and drive consensus in complex stakeholder environments with multiple conflicting priorities.

Specific Responsibilities:

• Work cross-functionally with many teams across the business.

• Conduct privacy impact assessments/DPIAs of programs, systems, advertising and marketing campaigns, digital platforms and properties, and vendor and their services.

• Provide practical and easy to understand compliance guidance to partners throughout the organization, daily.

• Document Record of Processing Activities, data mapping, Service Provider, Controller-Processor DPAs, and other required forms of documentation for the Privacy & Technology Compliance Program globally.

• Understand and stay abreast of global privacy and technology legal requirements and be able to identify regulatory implications. This includes conducting research on new regulations, sanctions, or findings.

• Identify repetitive technology/privacy compliance questions and requests, and develop proactive ways to reduce the one-off requests, through training, guidelines, or other means.

• Maintain privacy-related notices, policies, standards, guidelines, and processes of the Privacy and Technology Compliance Program.

• Create and maintain compliance playbooks for business and DTS partner use.

• Analyze trends and systematic issues and prepare reports/dashboards for management.

• Assist digital and web teams in advising and tracking on privacy requirements.

• Develop both foundational and role-based privacy and technology compliance trainings for K-C employees and contractors.

• As needed, track, manage and fulfill Subject Access Requests and other privacy-related requests.

• Assist Privacy Counsel and Data Privacy Officer on contract auditing of technology compliance terms including privacy, security, and AI.

Technical Competency Requirements:

• Our team works across many regulations around the world including North America, E.M.E.A., Asia-Pacific, and Latin America. A general understanding of global data privacy and technology regulations and concepts, ability to interpret them into business operations, business process, and technical and functional requirements, is needed.

• Proficiency in performing risk, business impact, and control assessments.

• Audit, compliance, information security, or governance experience is preferred.

• Experience driving or participating in change management is a plus.

• Working knowledge of the OneTrust privacy solution platform or similar matter-tracking or GRC technology is strongly preferred.

• Working knowledge of the Microsoft SharePoint is strongly preferred.

• Highly skilled in PowerPoint presentation creation, and other similar tools is strongly preferred.

• Experience with generative AI platforms and functionality is a plus.

Skills/Requirements:

• Candidates will be evaluated primarily upon their ability to demonstrate the competencies required to be successful in the role, as described above.

• Minimum of three years’ privacy, technology compliance or governance, or related work experience.

• Professional privacy certification such as CIPP strongly preferred. Other IT-related certifications, such as Security+, are a plus.

• Paralegal experience reviewing contractual terms and managing legal matters is a plus.

• Experience in Information Security, digital marketing and e-commerce, or other IT functions is a plus.

• Ability to communicate effectively in English including speaking, reading, and writing is required due to the global nature of this role. The ability to read, write, and speak in multiple languages is a plus.

• Willingness to work flexible global hours, including but not limited to significant portions of U.S. Central or Eastern time zone workdays.