Amanda B. Email & Phone Number

Kirkland, Wa, Us

Kirkland, Wa, Us

Seattle, Washington, United States

—Maturation of the Privacy Impact Assessment process – strategy, assessment procedures, risk scoping guidelines, policy development --Managed high volumes of product assessments; including being lead Analyst for Zoom Phone and Zoom Contact Center products/services--Key areas of focus within products/projects – Telecommunications, IT services, AI/Machine Learning, Healthcare, Contact Center as a Service, SaaS/PaaS, Third Party onboarding, Cookies, Education.--Knowledgeable of and regulated by the following laws/regulations; GDPR, EMEA, CCPA/CPRA, HIPAA, FCRA, and other regulatory bodies within Germany, Denmark, Ireland, Japan and China.--Privacy point for Zoom’s Third Risk Assessment process on the “Vendor Selection Committee” – supporting the evaluations and performing assessments for vendor onboarding and risk management. Conducted Vendor Privacy Assessments (along obtaining security testing, SOC reports, etc.).--Evaluated all products and projects for their collection of data, purpose of data, storage and sharing of data; in order to protect personal information and mitigate risk of legal impact to the enterprise.--Supported the creation of Data Sheets, Data Transfer Impact Assessments (DTIAs) and Data Protection Impact Assessments (DPIAs). Specifically, the Dutch DPIA ensuring the continued use of Zoom in the European markets.--Managed the Privacy Inbox and provided responses/resources for Data Subject Access Requests (DSARs), Privacy Inquiries (questions on data use/collection) and Incident Response.--Collaboration with enterprise teams to ensure accurate assessments were performed – Information Security, Technical Compliance, Product Legal, Commercial Legal (contracts), TPRM and Procurement--Given stretch assignments by senior management for program development, inter-company presentations, new hire on boarding and budgeting/staffing plans

Privacy and Risk Assessment Analyst: --Conducted Privacy Impact Assessments--Knowledge of CCPA, GDPR, COPPA, TCPA, CAN-SPAM, FCRA, HIPAA regulation/privacy laws.--Product/Service focus in: IoT, Mobile App/Web, Devices, HR, Marketing, Targeted Advertising, Finance/Supply Chain, Telemetry, Biometrics, and more!--Maturation of Privacy by Design program -- process development, collaboration with stakeholders and legal counsel and program strategy & compliance.--Support development of procedural and technical business requirements.-- Support development of privacy training materials and other communications to train employees and third parties, as appropriate, on company's privacy policies, data handling practices and procedures and legal obligations.--Assist with maintaining data flow mapping and inventory to ensure appropriate documentation is in place for legal compliance.--Communicate effectively and work cross functionally within the business to represent compliance positions and requirements while moving forward the best interests of the business

-Key participant on project teams, particularly regarding the oversight of delivery, system enhancements, and process improvements. -Creation & Implementation of standards, guidelines, procedures, and productivity metrics.-Program Maturation and Business Support Liaison. -Administrator for RSA Archer (eGRC tool) for Vendor Management team; consisting of risk analysis, contracting, reporting and data integrity. -Evaluation and Management of Third Party relationships; facilitating vendor selection, RFPs, inherent risk reviews and gathering information for business & technical requirements. -Maturation of procurement requirements, vendor monitoring, data reporting and data integrity. -Responsibilities in accordance to business competencies, compliance, regulatory (NCUA, etc.) and information protection requirements. -Development of advanced workflows, reporting, data feeds and change management. -Partner with internal and external resources to design and implement programs that support employees and member advocacy. -Participation in strategy setting discussions; Advisor to business on strategic planning and vendor selection process. -Compliance with State and Federal regulations; performance with managing/fulfilling Audit requirements. -Tracking and Reporting on Reputation & Financial Health metrics. -Experienced in: Third Party Management, Project Management, eGRC tools, Risk and Contracting processes.