Risk

• Create and manage CrossCountry’s privacy management program
• Partner with Cybersecurity and Technology to define data management framework, policies, and procedures
• Monitor and track global and domestic privacy regulations (e.g., GDPR, CPRA) and assess applicability
• Create, update, and maintain internal privacy policies and external privacy notices
• Lead and coordinate Privacy Risk Assessments, PIAs, and DPIAs; respond to Data Subject Requests (DSRs)
• Own privacy recordkeeping such as Records of Processing Activities (ROPA); develop retention, minimization, and destruction workflows
• Plan and execute privacy audits and remediation; develop privacy reporting dashboard with KPIs
• Establish and maintain third-party risk management framework; conduct vendor due diligence, classification, continuous monitoring, and contractual review
• Serve as primary liaison for privacy matters and deliver firm-wide privacy training and awareness

Senior Manager, Privacy and Third-Party Risk Program

Lead, Public Health Data Policy and Governance

Global Customs Governance Lead

Senior Business Control Specialist – QC Risk Governance

Lead Control Management Officer – VP Trade Surveillance Governance

Risk Analyst – Casualty