Legal Staff Paralegal in Richardson, TX

Profile

Information Privacy Analyst The candidate will facilitate e-discovery legal requests. Will assist with due diligence around the data privacy and security posture of potential vendors/processors. Assist with performing initial due diligence on third party data sources. Assist with the vendor data privacy risk assessment process. Assist with ongoing due diligence around the data privacy and security posture of vendors/processors. Maintain call center scripts for use by employees to explain or provide data privacy notice information and assist with client inquiries and requests. Assist with investigation of incidents as needed and maintain a log to track data privacy incidents/breaches. Assist with data privacy breach insurance coverage and track privacy vendor retainers and renewal dates. Assist with ongoing privacy compliance requirements, e.g., law, case law, codes, etc. Assist with subscriptions to compliance reporting service/law firm updates to stay informed of new developments. Assist with reporting on the tracking of new laws, regulations, amendments or other rule sources. Assist with seeking legal opinions regarding recent developments in law. Assist with identifying and managing conflicts in privacy law to include HIPAA, COPPA, GLBA, state privacy laws. Attend/participate in privacy conferences, industry associations, and think-tank events. Maintain annual compliance training for the Privacy Program. Maintain privacy awareness materials (e.g. posters and videos). Assist with Bank privacy awareness events (e.g., an annual data privacy day/week). Assist with additional duties as required by the Privacy Office. Bachelor's degree or the equivalent of 4+ years of legal and/or privacy related experience. Should have 1-3 years of hands on privacy experience required. Paralegal experience is preferred. Understanding of consumer consent and inquiries requested by data subject or regulatory bodies. Understanding of fundamental US and Global data security and privacy laws is required. Must have excellent written and verbal communication skills. Understanding and knowledge of privacy and information security standards (e.g., ISO 27001/27002, 22307, 23001, 29100, 31000, NIST SP800-53, Cobit, FFIEC), and commonly used concepts, practices and procedures within the privacy and information security field preferred. Knowledge of company policy, procedures, protocols and program management is required. Any IAPP certifications is a plus. Demonstrated experience working in a flexible, dynamic, professional environment is requireds. Must have demonstrated experience strategic thinking skills, creative problem solving, analytical skills and verbal and written communication skills, including meeting facilitation and presentation skills. Must have demonstrated experience with research and analysis of laws (regulations, statutes, codes), case law and regulatory changes and ability to draft memorandum, surveys, charts and other documents as may be needed to demonstrate research findings.

Additional info

ID: 2018-3560.

Company info