Sr. Privacy Compliance Analyst

A genuine desire to make a difference in the lives of others is the foundation for everything we do. With a customer-first mindset and an intentional focus on building strong teams, we’ve been able to uphold our legacy of financial stability while investing in new, innovative technologies that support the needs of our customers. Our high-performance culture focused on operational excellence thrives thanks to remarkable people united by compassion and a customer-first commitment. Are you ready to make a difference?

The Senior Privacy Compliance Analyst serves as the subject matter expert and point of contact for privacy incident response and incident handling across the organization. This role leads the intake, investigation, risk assessment, notification, and resolution of privacy incidents, while monitoring and interpreting evolving privacy and data protection requirements and translating regulatory obligations into practical business processes, guidance, and controls.

This role partners with legal, information security, IT, product, operations, claims, and service teams to ensure privacy incidents are promptly identified, escalated, investigated, contained, and remediated in compliance with applicable legal, regulatory, and contractual requirements.

• →Incident Response & Management: Lead and coordinate the end-to-end response to privacy incidents, including intake, triage, investigation, containment, remediation, and closure. Ensure timely escalation to appropriate stakeholders and leadership and maintain accurate incident records and reporting.

• →Incident Risk Assessment & Notification: Assess the scope and risk of incidents and determine whether they trigger regulatory, contractual, or individual notification obligations under applicable federal and state requirements. Draft and coordinate notifications to affected individuals, regulators, and business partners within required timeframes.

• →Root Cause Analysis & Remediation: Conduct root cause analysis of incidents, identify control gaps and trends, and recommend and track corrective and preventive actions to completion in alignment with regulatory requirements.

• →Business Partnership & Advisory: Provide subject matter expertise and consultative guidance to business units, legal, and information security on incident handling and privacy compliance, including incidents involving third-party vendors. Research complex questions using internal and external resources.

• →Policy, Process, & Documentation Development: Draft, update, and maintain and improve incident response policies, procedures, playbooks, job aids, training materials, and compliance guidance to support consistent and compliant incident handling.

• →Regulatory Monitoring & Industry Interaction: Monitor, analyze, and interpret privacy, data protection, and breach notification laws and regulations, and communicate business implications to stakeholders. Participate in industry forums and meetings to monitor incident response trends and develop and maintain productive working relationships with industry contacts.

• →Audit & Regulatory Support: Support internal audits, regulatory examinations, and regulator inquiries related to privacy incidents by organizing documentation, responding to inquiries, and assisting with corrective action plans. Deliver training, presentations, and guidance on incident reporting and response requirements and emerging regulatory trends.

• →Privacy Metrics, Reporting & Trend Analysis: Develop and maintain privacy incident metrics, trend analyses, and reporting to identify recurring risks, evaluate response effectiveness, and support continuous improvement of the privacy compliance program.

• →Privacy Controls and Process Improvement: Identify opportunities to strengthen privacy controls, operational procedures, and preventive measures based on incident findings, regulatory developments, and emerging privacy risks.

• 4–6+ years of privacy, fraud, information security

• Demonstrated experience handling privacy and security incidents from intake through investigation, risk assessment, notification, and closure, with the ability to translate complex regulations into practical guidance.

• Proven ability to manage complex work, assess risk, and meet deadlines in a detail-oriented, time-sensitive environment.

• Basic knowledge of federal and state privacy, data protection, and breach notification requirements.

• Experience coordinating incident response with information security, legal, and third-party vendors, including managing regulator inquiries following an incident. (preferred)

• Experience developing playbooks, training materials, and compliance guidance. (preferred)

Customer Focus: Partner cross-functionally to provide creative solutions to meet customer objectives while maintaining compliant processes and controls.

#LI-DNI