Legal Analyst, Data Privacy

The Vanguard Group - Malvern, PA

Full-time - Mid Level

Hybrid - Malvern, PA

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

Data and technology enable Vanguard to operate and serve our clients, and regulatory developments in the privacy and technology space continue to evolve and introduce new challenges that require proactive planning and diligence. This role will help drive business outcomes by keeping Vanguard's global enterprise informed of new requirements and supporting their development of best practices and innovative solutions. The Global Privacy & IT Legal team is seeking a Legal Analyst to track and analyze developments in the data privacy and technology space. Privacy is an exciting and rapidly changing area of law impacting all of Vanguard's business lines, and this role will provide the rare opportunity to engage with partners in all divisions across our global enterprise. Working closely with Global Privacy's Program Team, Compliance subject matter experts and Global Public Policy, the successful candidate will lead efforts to build awareness of regulatory developments impacting Vanguard's enterprise-wide privacy program and related policies, procedures and standards. This role will also play a key role in supporting Vanguard's adoption of emerging technologies, including Generative AI. Special projects driven by these regulatory changes will provide the opportunity to foster a trusted advisor relationship with impacted business partners, and to learn about the technology solutions that enable us to deliver best-in-class service to all Vanguard clients. We are seeking candidates with experience or a demonstrated interest in navigating Vanguard's compliance obligations, identifying opportunities to improve efficiency by recognizing common requirements across compliance frameworks, and delivering clear and practical guidance to partners with differing levels of subject matter awareness.

Responsibilities

• Provides support related to global data privacy and protection regulations, as well as fraud prevention measures.
• Leads the review of incident reports received through the fraud hotline to identify, investigate, and dispose of potential privacy incidents.
• Prepares incident report responses according to regulatory requirements, including consultation with Legal to ensure reported incidents adhere to required notifications.
• Supports the development of privacy policies, standards, and procedures for the enterprise-wide privacy program.
• Participates in projects to provide expertise on applicable regulatory and reporting requirements specific to global data privacy laws and regulations.
• Reviews incident metrics, such as volumes, cycle time, and accuracy to identify additional measures as well as suggest improvements to the control and response framework.
• Develops and leads delivery of privacy-related trainings to internal partners across the enterprise to increase awareness around the privacy program as well as to ensure adherence to data privacy laws and regulations.
• Participates in special projects and performs other duties as assigned.

Requirements

• Minimum of three years related work experience, privacy and regulatory experience in the financial services industry preferred.
• Undergraduate degree or equivalent combination of training and experience.
• Technology expertise/experience working with and conversing with IT.
• Prior Data Privacy/Security/Governance/Policy drafting experience.
• CIPP helpful.