Regulatory and Consumer Protection Analyst- Privacy

POSITION: Regulatory and Consumer Protection Analyst- Privacy

JOB DUTIES: Responsible for day-to-day oversight of Company’s privacy program. Assess Company’s compliance with privacy laws and regulations nationwide; collaborate with a cross-functional team on long term projects to ensure Company’s compliance with rapidly evolving privacy landscape. Respond to customers’ requests for data access and deletion under various state laws including the California Consumer Privacy Act (CCPA). Assess current practices and take actions to ensure proper end-to-end execution of CCPA, CCRA as well other consumer protection and regulatory programs. Evaluate, monitor and implement new regulatory requirements at a state and federal level to bolster the Privacy program in light of Mercari’s status as a regulated financial institution and e-commerce marketplace. Responsible for customer protection including training, complaint handling, financial reporting, GRC, product and marketing reviews. Identify internal areas of emerging risk, track regulatory updates, and utilize judgment to assist in prioritizing resources and planning. Remote work permitted within the U.S.

HOURS: 40 hours per week, Monday through Friday

SALARY: Zone 1: $125,715.00 - $135,600.00

Zone 2: $125,715.00

Zone 3: $125,715.00

LOCATION: Mercari, Inc., 3101 Park Blvd, Palo Alto, CA 94306

REQUIREMENTS

Main Requirement: Bachelor’s Degree in Law, Privacy Law or a closely related field of study and two (2) years of experience as a Regulatory and Consumer Protection Analyst, Privacy Specialist or closely related experience working in a financial institution, bank, money transmitter or similarly regulated entity.

Required Certification: Certified Regulatory Compliance Manager or Certified Information Privacy Professional

Special Skills: Also requires two (2) years of experience in the following:

• Draft and implement privacy policies for tech companies;
• Draft and launch privacy training for corporate employees;
• Detailed knowledge of, and ability to operationalize, state and federal privacy laws and regulations, including FTC guidelines, CCPA and CPRA;
• Admin tools such as ZenDesk, GSuite (e.g., Google Sheets), Jira, Confluence, Slack, or Looker;
• Familiarity with financial regulations such as GLBA, Reg E and Escheatment;
• Investigate and respond to potential data breaches, as well as develop training materials to prevent data incidents;
• Track the lifecycle from identification to resolution including time to complete, number/percent of affected users, overall ROI, and other quantitative yardsticks to be developed; and
• Privacy matters at both a state and federal level including leading PIC and PIA efforts and implementation.

CONTACT: Email resume to [email protected]. Please insert job code WMZ2024, job title, and location on resume.

*Zone 1 includes locales such as the San Francisco Bay Area and New York City

**Zone 2 includes locales such as Austin, Boston, Los Angeles and Seattle

***Zone 3 includes locales such as Denver, St. Louis, and Houston