Privacy Analyst II [Contract to Hire]

Job Description:

The Privacy Analyst II will support the Data Privacy and Security Executive Counsel with privacy and data security activities of the legal team and assist in promoting privacy awareness and education across the various business units. The Privacy Analyst shall maintain confidentiality and exercise a high degree of discretion.

Specific Responsibilities

• Manage Iovance’s privacy and security related contractual documents, from preparation to signature. Assist and follow up with business owners and external parties to progress contract to execution.
• Manage the privacy process in the procurement platform, including review of privacy requirements, and review of privacy terms.
• Automate and update company-wide data inventory, keep the inventory up-to-date, generate data maps and data flows, prepare ROPA. 
• Manage, review and approve all Use of Likeness requests.
• Track, investigate, and draft privacy incident reports for all incidents.
• Act as a member of the Incident Response Team when a security incident is related to Privacy.
• Perform and manage all vendor privacy assessments, determine risk levels of vendors, schedule privacy committee meetings.
• Conduct DPIA, PIAs, and/or TIAs for new processing activities, work cross-functionally to obtain relevant information, work with DPO when necessary, and finalize disposition.
• Develop and deliver tailored privacy training based on departmental needs, develop privacy materials (FAQs, playbooks, etc.).
• Work cooperatively with departments in overseeing data subject requests
• Stay informed on privacy laws (GDPR, PIPEDA, CCPA, HIPAA, and others provided by Privacy Counsel) attend webinars and training.
• Design, implement, and manage the OneTrust privacy SaaS. Incorporate the DPIA process into OneTrust for automating information from business owners.
• Support Privacy Counsel with implementing applicable privacy and data protection laws.
• Monitor privacy inbox for detection and escalation of requests and complaints from data subjects, privacy incidents, and personal data breaches.
• Perform other special projects as needed.

Education and Qualifications

• Bachelor’s Degree or equivalent experience.
• Paralegal Certificate or Juris Doctor preferred.
• 5+ years of related experience in life sciences.
• Minimum of 1 year experience in Privacy, preferably 3.
• CIPM, CIPP/E, CIPP/US certifications preferred.
• In depth knowledge of or learn quickly new systems such as Microsoft Office Suite, SharePoint, MSForms, ShareFile, Conga, DocuSign, ORO.
• Must be proficient in the OneTrust platform.
• Understanding of cybersecurity and incident response standards.
• Sound judgement in handling highly sensitive and confidential information.
• Comfortable in a fast-paced environment with minimal direction and changing priorities.
• Exceptional organization and project management skills.
• Demonstrated skills in providing excellent service to customers.
• Demonstrated skills in collaboration, teamwork, and problem-solving to achieve goals.
• Willingness and desire to learn new skills.
• Able to meet tight deadlines, efficiently multi-task, and present to groups.
• Able to detect and implement process improvements.
• Able to learn difficult concepts quickly and create and implement creative solutions.
• Effective organizational skills required, strong attention to detail, excellent oral, written and interpersonal communications skills and emotional intelligence.

Physical Requirements

• Sit for an extended time in front of a computer

The physical demands described here represent those that an employee must meet to perform the essential functions of this job successfully. Reasonable accommodations may be made upon request to enable individuals to perform essential functions.

Physical Demands and Activities Required 

• Must be able to remain in a stationary position standing or sitting for prolonged periods of time.
• Must be able to move about inside an office and exert up to 10 pounds of force occasionally or a negligible amount of force frequently or constantly to lift, carry, push, pull, or otherwise move objects.
• Must have visual acuity to perform activities such as: preparing and analyzing data and figures, viewing a computer screen, and extensive reading.
• This position requires repetitive motion, substantial movements (motions) of the wrist, hands, and/or fingers.
• Must be able to communicate with others to exchange information.
• Must be able to withstand the physical requirements to travel 50%

Mental: Clear and conceptual thinking ability; excellent judgment, troubleshooting, problem-solving, analysis, and discretion; ability to handle work-related stress; ability to handle multiple priorities simultaneously; and ability to meet deadlines

Work Environment 

This job operates in a professional workplace or remote office environment and requires standard office equipment and keyboards. Employees who work remotely are expected to maintain their workspace and environment safely and free from safety hazards.

The statements contained in this document are intended to describe the general nature and level of work being performed by a colleague assigned to this description. They are not intended to constitute a comprehensive list of functions, duties, or local variances. Management retains the discretion to add or to change the duties of the position at any time.

Iovance is committed to cultivating and offering a diverse and inclusive work environment. As an equal-opportunity employer, our employees and applicants will be considered without regard to an individual’s race, color, religion, sex, pregnancy, national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information, military and veteran status, and any other characteristic protected by applicable law. If you need assistance or accommodation to apply to one of our opportunities, please contact careers@iovance.com.

By voluntarily providing information and clicking “Submit Application”, you explicitly consent to the collection and use of your personal information for the purposes described above and in our Candidate Privacy Notice.