Corporate Data Privacy Architect

Westfield - Seville, OH

Full-time

Seville, OH

Educational Services

About the position

The Corporate Data Privacy Architect at Ohio Farmers Insurance Company plays a crucial role in guiding projects that impact privacy, data protection, and security. This position operates under minimal supervision and is responsible for advising on data usage while managing legal risks and ensuring compliance with regulatory requirements. The architect focuses on providing strategic and tactical legal counsel to various internal teams, including legal, product, operations, and business units. Additionally, the role involves supporting the design, establishment, maintenance, and monitoring of policies and procedures that promote the privacy compliance program within the organization. In this role, the architect will develop, implement, administer, and adhere to an enterprise-wide privacy compliance program that ensures the protection of personal data in accordance with company policies and regulatory mandates. The architect will also support projects that affect privacy, data protection, and security, responding to inquiries and investigations related to privacy and security from customers and regulatory bodies. This includes drafting external privacy notices, disclosures, and regulatory filings, as well as coordinating responses and updating internal policies to ensure compliance with global privacy and cybersecurity laws. The Corporate Data Privacy Architect will provide training to employees on data privacy and security, policy enforcement, and monitoring of the privacy compliance program. Regular assessments of data privacy hygiene will be performed, including mitigation and remediation efforts, ensuring that privacy by design and default principles are integrated into the organization’s operations. The architect will monitor internal policies and processes related to data protection, focusing on aspects such as data collection, accuracy, retention, use, security, transparency, access, and correction of personal data. Furthermore, the architect will support and advise on data protection compliance audits and impact assessments, ensuring that data protection impact assessments are conducted correctly and that their conclusions align with relevant data protection laws.

Responsibilities

• Provide guidance on projects affecting privacy, data protection, and security.
• Advise on data uses while managing legal risk and ensuring regulatory compliance.
• Develop, implement, administer, and adhere to an enterprise-wide privacy compliance program.
• Support the design, establishment, maintenance, and monitoring of privacy compliance policies and procedures.
• Respond to privacy and security-related customer and regulatory inquiries and investigations.
• Draft external privacy notices, disclosures, and regulatory filings.
• Coordinate responses and update internal policies to ensure compliance with global laws.
• Provide employee training on data privacy and security and policy enforcement.
• Perform periodic data privacy hygiene assessments, mitigation, and remediation.
• Monitor internal policies and compliant processes for data protection.
• Support and advise on data protection compliance audits and impact assessments.

Requirements

• 3-5 years of experience in Data Protection, Data Governance, or Privacy Operations, or a related field.
• Bachelor's degree in Legal Studies or a related field and/or commensurate experience.