Privacy Analyst, Enterprise Data Privacy Office

The Enterprise Data Privacy Office (EDPO) is responsible for ensuring that FINRA meets or exceeds its legal and ethical obligations with respect to the security and use of information it collects while executing its responsibilities, fostering the confidence of firms, regulators, staff and the investing public.

The Data Privacy Analyst performs a variety of specific duties depending upon the current needs of the EDPO department under the general direction by the Senior Director and Counsel, Enterprise Data Privacy Office.

This position will require a close partnership with the entire EDPO team.

Essential Job Functions:

As directed by senior staff within the Privacy Office:


* Support FINRA’s efforts for implementing, maintaining and monitoring the Company’s data security and privacy program.

These efforts specifically include the development, creation, and dissemination of privacy program metrics and reporting of metrics to the FINRA Compliance Office and the Cyber & Information Security group, as appropriate.


* Assist in maintaining and approving methodologies for the review and documentation of the Company’s internal controls over data collection and dissemination.


* Assist in developing and conducting EDPO compliance activities, including the development and implementation of new policies or solutions, managing annual training completion and tracking, conducting incident reviews and responses, and engaging with other compliance programs.

Assist with Privacy Impact Assessments and other privacy governance projects.


* Track current EDPO initiatives and analyze the extent to which data security policies are incorporated.


* Make specific recommendations for improvements and document compliance and department procedures.


* Track and support internal and external audit and certification document production, schedules, and responses.

Track mitigation and remediation efforts as needed.


* Review departmental data policies, compare to corporate policies, identify gaps, and make recommendations for improvement.

Develop and maintain metrics that represent departmental compliance with corporate policies.


* Manage EDPO’s technology and business contracts and ensure timely renewals and processing.


* Responsible for facilitating corporate and cross-departmental communications regarding the Company’s data security program.

Provide support to FINRA constituents that require guidance on data dissemination issues.


* Act as a representative of the business data user community in various forums.


* Demonstrates of FINRA’s values.


* Collaborates, both in-person and virtually, in furtherance of FINRA’s mission of investor protection and market integrity.

Education/Experience Requirements:


* Bachelor’s in business or other relevant field and five (5) years of compliance or privacy program experience, or equivalent combination of education and experience.


* Excellent written and o...