Data Privacy Analyst

**Job Description**:
3M is Hiring Data Privacy Analyst

Collaborate with Innovative 3Mers Around the World

Choosing where to start and grow your career has a major impact on your professional and personal life, so it’s equally important you know that the company that you choose to work at, and its leaders, will support and guide you. With a diversity of people, global locations, technologies and products, 3M is a place where you can collaborate with 93,000 other curious, creative 3Mers.

“At 3M, we want to make sure that everyone, from all walks of life, know they can share their opinions, they’re heard, and change is made based on their input.” - Ann Anaya, chief diversity officer at 3M”

The Impact You’ll Make in this Role

The person hired for the position of Data Privacy Analyst will help the company meet its global obligations to manage personal data privacy risk and to address controls for compliance imposed by governmental, industry, contractual and 3M Standards by conducting privacy assessment activities for the company. The Privacy Analyst will work with stakeholders across the organization to identify personal information, its use, and how best it can be protected. This will require forming partnerships with groups in areas such as IT, business groups, and project teams and providing consultation to the business process owner on ways to close gaps or reduce risk

As a Data Privacy Analyst, you will have the opportunity to tap into your curiosity and collaborate with some of the most innovative and diverse people around the world. Here, you will make an impact by:

- Learn and develop expertise in 3M’s privacy program, policy, standards and processes;
- Active learning of industry best practices for data privacy tools and techniques and new or changing regulations for global personal data privacy requirements;
- Manage and Perform multiple concurrent Privacy Impact Assessments, which are assessments used to document and maintain a record of 3M’s processing activities, associated privacy risks, and privacy control requirements.
- Participate in personal data incident investigations.
- Consult, communicate and perform follow up actions with business process owners to ensure and verify that privacy requirements identified are built into business processes;
- Identify areas of improvement in local practices relative to managing data privacy;
- Participate in projects needed for an effective global privacy compliance program;
- Consult with Legal and IT teams (i.e. Architecture, Applications, Data, Security) to assist in validation of data privacy requirements;
- Collaborate with other stakeholders to develop a sustainable inventory of business processes, products, services, and systems that process personal information;
- Consult on the development and implementation of solutions to ensure privacy standards are correctly implemented;
- Educate and assist in problem solving to promote various stakeholder's understanding of, and their responsibilities with respect to, the personal data privacy requirements;
- Contribute best practices in terms of findings, checklists, templates, testing methods, and techniques to support and advance support and advance data privacy compliance initiatives;
- Promote data privacy as an enabler of the organization's core business processes;

Basic Qualifications
- Bachelor’s degree in Computer Science, Information Security, or equivalent.
- An advanced certification such as in Privacy Risk (CIPP), Security (CISSP, CISM, GCEH) or Audit (CISA). It is a Plus
- Experience with data, data objects, data structure, industry standards and/or data security controls
- Strong problem solving, analytical, technical and troubleshooting skills
- At list 2 years of experience in the use or support of a Governance, Risk and Compliance (GRC) workflow system, such as, auditing, risk management, vendor risk management, security assessments
- Working knowledge of privacy laws such as GDPR, CCPA, HIPAA, PCI

Additional qualifications that could help you succeed even further in this role include:

- High School Diploma/GED or higher from an accredited institution and experience in data privacy
- Ability to work collaboratively with a globally distributed team, but also to complete tasks individually, with limited required direction and guidance
- Ability to interact with a variety of internal and external people in a professional and articulate way via spoken or written word that creates confidence in his/her knowledge and abilities and helps foster mutually satisfactory resolution to risk gaps and issues
- Ability to analyze a system for data privacy compliance, and to understand and solve business problems while managing associated risks and compliance requirements.
- Strong organizational skills; ability to establish priorities, balance multiple tasks and deadlines at one time, handle competing priorities, maintain documentation and follow through on all open items/tasks.