Compliance Analyst

We are seeking a self-motivated compliance and data privacy analyst to support National

Pen's & Compliance and Data Privacy Program. We are looking for an individual familiar with

SOX ITGC compliance and with major data privacy laws, including GDPR and CCPA / CPRA,

possessing 2-4 years of related work experience in these areas.

Primary Responsibilities :

• Supporting the Data Privacy and Compliance lead and manager with compliance and privacy initiatives aligned to SOX-ITGC, GDPR, and CCPA / CPRA.
• Reviewing quarterly SOX user testing / access review submissions to ensure accuracy and completeness of data, as well as appropriate formatting per known SOPs and guidelines.
• Helping in vendor & 3rd party risk assessment.
• Reviewing vendor contracts, MSA, SOC2 type 2 report, ISO certification validation, etc.
• ROPA : Record of processing activities assessment
• Supporting technical implementation of data privacy initiatives to include website cookie preference banners, Global Privacy Control (GPC) sensing and data tagging, and customer opt-out from 3rd party data sales and sharing. This involves close coordination with National Pen's technical product teams.

Preferred Experience and Skills :

Preferred Attributes and Qualifications :

What You'll Gain Privacy & Compliance Analyst