Privacy Associate

AlixPartners - Detroit, MI

Full-time

Remote - Detroit, MI

Professional, Scientific, and Technical Services

About the position

The Privacy Associate at AlixPartners will be part of the Corporate Services Legal Team, focusing on privacy and data protection compliance. This role involves supporting various legal, compliance, and risk initiatives related to data governance and privacy regulations. The position requires strong writing, organizational, and communication skills, with a keen attention to detail. The ideal candidate will work in a hybrid model, primarily based in Southfield, Michigan, or London, England, and will report to the Associate General Counsel overseeing Privacy & Data Protection.

Responsibilities

• Provide support in compliance with state, federal, and global data privacy statutes and regulations, including GDPR, CCPA, PIPL, HIPAA, HITECH, and ePrivacy Directive.
• Maintain and enforce AlixPartners' data governance and privacy policies and programs.
• Respond to client questionnaires and due diligence requests.
• Review data protection agreements and ensure consistency with preferred terms related to data governance, privacy, and security.
• Conduct, execute, and document Privacy Impact Assessments and Risk Assessments for various programs and projects.
• Intake, document, and respond to Data Subject Requests.
• Partner with cross-functional teams to identify and document privacy risks and develop mitigation plans.
• Conduct privacy assessments of third-party vendors and tools in collaboration with the procurement team.
• Monitor changes in the privacy landscape and implement actionable measures.
• Draft internal communications related to privacy and data governance.
• Complete administrative tasks related to the execution of a Privacy Program, such as scheduling meetings and taking minutes.

Requirements

• Minimum two (2) years of experience in data governance, privacy, compliance, or as a paralegal.
• Familiarity with at least one data privacy regulation and associated security frameworks (e.g., GDPR, CCPA, HIPAA).
• Experience working with data from multiple sources and a willingness to understand and analyze data.
• Experience with Privacy Impact Assessments and Data Subject Access Requests is a plus.
• Contract review experience is a plus.
• Privacy certifications (e.g., CIPM, CIPT, CDPSE) are a plus.
• Experience using OneTrust Privacy Management Software is a plus.
• Experience with privacy principles or technologies such as privacy by design, user data protection, and data inventory is preferred.
• Knowledge of threat modeling, data anonymization, and auditing access to data is preferred.
• Strong initiative and ability to work independently without daily supervision.
• Excellent written and verbal communication skills in English.

Nice-to-haves

• Experience with Privacy Impact Assessments and Data Subject Access Requests.
• Contract review experience.
• Privacy certifications (e.g., CIPM, CIPT, CDPSE).
• Experience using OneTrust Privacy Management Software.
• Experience in privacy principles or technologies such as privacy by design, user data protection, and data inventory.

Benefits

• Health insurance
• Vision insurance
• Dental insurance
• Disability insurance
• 401(k)
• Tuition reimbursement
• Identity theft protection
• Mental wellness support
• Generous paid leave policy including vacation/personal time, sick time, parental leave, and holidays.