Privacy & Risk Analyst

The Privacy & Risk Analyst provides administrative support services to the Global Privacy Office team and the Third Party Risk Management. This role is responsible for issuing and reviewing risk assessments, completing and maintaining data inventories, and upkeep of supplier records.

• Intakes, classifies, and fields a variety of client enquiries related to privacy, data protection, and TPRM (third party risk management) matters including privacy and TPRM questionnaires/ Due diligence and RFI's.

• Issues and reviews privacy impact assessments on current and new activities, projects, and suppliers.

• Instrumental in the handling and management of privacy incidents and individual rights requests (data access, erasure, etc. through our privacy platforms.

• Completes and maintains data inventory on all business processes.

• Maintains the quarterly review process of subprocessors and client notifications.

• Maintains current list of suppliers with applicable risk-rankings.

• Ensures new suppliers are adequately documented and where appropriate, identifies whether new suppliers are replacing current suppliers in data inventory.

• Maintains risk register for both privacy and TPRM.

• Supports new vendor onboarding, risk reviews, and offboarding activities.

• Handles AP vendor risk enquiries.

• Works in software systems to maximize utilization.

• Other duties as assigned.

• Upholds the Crawford Code of Business Conduct.

• Upholds the Crawford Code of Business.

• Associate's degree in business, legal studies or related field.

• Three years of business/administration work experience.

• One year of experience working for a multi-national organization.

• Strong planning, organizational and prioritization skills.

• Excellent written and verbal communication skills.

• Working knowledge of Microsoft Word, Excel and PowerPoint.

• Strong attention to detail and accuracy.

• Strong customer service ethics and delivery.

• Ability to handle confidential and business sensitive information.

• Self-motivated and flexible.

• Knowledge of and interest in:

  • Vendor management cycle
  • Information, IT and Cyber security
  • Data Privacy and security