United Airlines - Chicago, IL
posted 4 months ago
Connecting People. Uniting the World. There's never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world - with millions of customers and tens of thousands of employees - we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly. We're on a path toward becoming the best airline in the history of aviation. Join our Cybersecurity and Digital Risk (CDR) team to help us also become the leading cyber-safe airline in the industry. United's CDR team is tasked with keeping our customers' and employees' information safe and secure. Our primary mission is to embed cybersecurity into the DNA of United Airlines by reducing business risk through implementation of strong cybersecurity best practices. The Data Protection & Privacy Senior Analyst is responsible for building and contributing to the Data Protection & Privacy programs. The senior analyst leads and provides ongoing support of this program by ensuring business strategies, plans and initiatives are driven/delivered in compliance with governing regulations, internal policies, and procedures. The Data Protection & Privacy Sr. Analyst works closely with Legal, HR, Business, Digital Technology, and other Cybersecurity associates and is part of a strategic and comprehensive cybersecurity team that is accountable for ensuring compliance in accordance with regulatory expectations, risk appetite, organizational risk practices and evolving business practices. In this role, you will lead the implementation of the Data Protection & Privacy strategy & programs, understand, communicate, and implement end-to-end capabilities such as Data Governance, Data Protection, Data Privacy, Data Rights Management, Data Encryption & Tokenization, Data Classification, and Data Security in the cloud. You will work closely with internal stakeholders to evaluate potential compliance areas to identify gaps and ensure full compliance with data protection & privacy regulations. Additionally, you will interpret and apply relevant laws, regulations, policies, and related guidance to enhance processes, policies, standards, or programs, in support of cybersecurity responsibilities. Facilitating discussions with business teams to educate them about applicable privacy/data protection requirements, including those relevant to cybersecurity controls, will also be a key part of your responsibilities. Coaching team members will be an essential aspect of your role as well.