Technical Privacy Compliance Senior Administrator

CooperVision, a division of CooperCompanies (NASDAQ:COO), is one of the world's leading manufacturers of soft contact lenses. The Company produces a full array of daily disposable, two-week and monthly contact lenses, all featuring advanced materials and optics. CooperVision has a strong heritage of solving the toughest vision challenges such as astigmatism, presbyopia and childhood myopia; and offers the most complete collection of spherical, toric and multifocal products available. Through a combination of innovative products and focused practitioner support, the company brings a refreshing perspective to the marketplace, creating real advantages for customers and wearers. For more information, visit

Job Summary:

The Technical Privacy Compliance Senior Administrator is responsible for developing, managing and overseeing the implementation and execution of Global IT privacy controls for Cooper's Privacy and SOC2 Programs. This position will utilize sound judgment to drive IT compliance processes related to privacy regulations and data privacy risk management. Work will include project management of IT control development and implementation; updating and tracking IT controls in the Privacy and SOC2 control framework; and contributing to the implementation of the BigID application. This role will also conduct readiness on behalf of IT Compliance of the IT Privacy controls of in-scope applications and administer the applications and tools that support the program, including BigID. In the event of internal or external audits, the IS Compliance Senior Analyst is the lead contact for all related evidence to be provided by IT for the Privacy and SOC2 Programs.

• Participate in and direct the project to implement BigID on CVI IT Compliance's behalf, and collaborate with vendors and contractors involved with the project. Upon implementation of BigID take on platform administrative duties.
• Work with Manager on the technical aspects of the rollout of BigID to additional locations after initial implementation
• Proactively identify applications in-scope for Privacy and SOC2 Programs.
• Document and maintain record of processing activities for in-scope applications
• Conduct the design of Privacy and SOC2 IT controls for in-scope applications. Support stakeholders with the implementation of these controls, including conducting readiness testing to evaluate their effectiveness.
• Perform system administrator duties for applications and tools used in the Privacy and SOC2 Programs.
• Collaborate on an on-going basis with the Data Protection and Legal Offices as well as other stakeholders to manage technology-driven solutions supporting the IT Privacy and SOC2 Programs.
• Document IT controls, process flows and procedures for IT controls of the Privacy and SOC 2 Programs
• Participate in internal and external audits of IT controls' design and operating effectiveness related to the Privacy and SOC2 Programs, working with stakeholders to provide evidence of control processes and execution
• Assess the risk and work in collaboration with stakeholders to complete remediation of audit findings related to IT controls of the Privacy and SOC2 Programs

Travel Requirements :

International travel up to 10%, off-hour meetings

Qualifications

Knowledge, Skills and Abilities:

• Exposure to or knowledge of privacy regulations and their impact on IT processes
• Excellent understanding of IT applications, infrastructure and processes, including the ability to read and understand highly technical material and to suggest technological solutions
• Excellent communication skills to be able to communicate technical concepts in layman terms to diverse audiences
• Excellent analytical, problem-solving and organizational skills with attention to detail
• Ability to work independently with minimal supervision
• Ability to effectively prioritize and execute tasks in a fast-paced environment
• Adapts readily to changes in workload and scheduling
• Detailed-oriented, independent and thorough in examination and analysis
• Highly self-motivated and self-directed
• Extensive experience working in a team-oriented environment in a collaborative manner

Work Environment:

• Normal office environment
• Sedentary to light physical effort necessary to perform the job
• Extensive contact with employees in the US and global locations, and with external vendors and auditors

Experience:

• 2 to 3 years of experience working on technical environments and IT operational controls
• 2 to 3 years of experience with technical control implementation
• Experience working with IT control frameworks (e.g., SOC1/2, SOX, HIPAA, ISO 27001, PCI DSS)
• Experience implementing and managing the BigID platform as well as with the implementation of data catalogues, data discovery, data redaction and other data mapping and data subject request functionality on other privacy tools (e.g., OneTrust) will be preferred

Education:

• Bachelor's degree in business, accounting, finance, computer science, information systems or a related discipline required, or equivalent combination of education and experience.
• CISA, CIA, CPA, IAPP's CIPT or equivalent certification preferred

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace .

For U.S. locations that require disclosure of compensation, the starting base pay for this role is between $89 ,288 .00 and $ 118 ,970.00 per year and may include cost of living adjustments. The actual base pay includes many factors and is subject to change and modification in the future. This position may also be eligible for other types of compensation and benefits.

#LI-RK1