Our Client is one of the United States’ largest insurers, providing a wide range of insurance and financial services products with gross written premiums well over US$25 Billion (P&C). They proudly serve more than 10 million U.S. households with more than 19 million individual policies across all 50 states through the efforts of over 48,000 exclusive and independent agents and nearly 18,500 employees. Finally, our Client is part of one the largest Insurance Groups in the world.
Job Summary
The Privacy Assessment & Governance Specialist supports enterprise privacy, data protection, information governance, and AI governance programs. This role is responsible for assessing privacy and compliance risks across systems, applications, vendors, business processes, and AI-enabled solutions, while helping the organization meet regulatory requirements and business objectives.
Key Responsibilities
•Conduct Privacy Impact Assessments (PIAs), Information Governance Assessments, and AI Privacy Assessments.
•Evaluate privacy, data protection, and AI-related risks for new and existing initiatives.
•Assess compliance with privacy regulations across the U.S., Mexico, Brazil, and India.
•Review data flows, cross-border transfers, consent mechanisms, and data handling practices.
•Support AI governance initiatives and assess AI use cases for privacy, security, and compliance risks.
•Investigate privacy incidents and support response activities.
•Process privacy rights requests, including access, correction, deletion, and opt-out requests.
•Prepare reports, risk assessments, and remediation recommendations.
•Evaluate electronic consent management processes including site revies and testing.
•Partner with Legal, Compliance, Information Security, Procurement, Product, and business teams to identify and mitigate risks.
Requirements
•Bachelor's degree in Cybersecurity, Information Security, Privacy, Information Systems, Computer Science, Risk Management, Business Administration, Law, or a related field.
•2-5 years of experience in Privacy, Cybersecurity, Risk Management, Compliance, Governance, or Data Protection.
•Experience conducting privacy assessments, risk assessments, compliance reviews, or third-party assessments.
•Experience working with international privacy and data protection requirements.
•Strong analytical, communication, stakeholder management, and documentation skills.
Preferred Knowledge
•CCPA/CPRA and other U.S. privacy regulations.
•LGPD (Brazil), LFPDPPP (Mexico), and DPDPA (India).
•Privacy-by-design principles.
•NIST Cybersecurity Framework.
•Third-party risk management and cloud security concepts.
•AI governance, responsible AI practices, and AI risk assessments.
•Incident response and data breach investigation
Preferred Certifications
•CIPP
•CIPM
•CIPT
•AI Governance or Responsible AI certifications
Benefits
Competitive compensation and benefits package:
•Competitive salary and performance-based bonuses
•Comprehensive benefits package: Grocery vouchers, saving funds, SGMM, etc.
•Career development and training opportunities
•Dynamic and inclusive work culture within a globally renowned group
•Private Health Insurance
•Pension Plan
•Paid Time Off
•Training & Development
Note: Benefits differ based on employee level.
By applying for this position, candidates acknowledge and agree that:
•Personal Data Processing: The personal data provided during the recruitment and selection process will be collected, processed, and retained for legitimate recruitment and compliance purposes, in accordance with applicable data protection and privacy laws and FBS internal policies.
•Legal Authorization to Work: Employment with FBS is conditional upon the candidate having valid, local legal authorization to work in the country where the role is based at the time of hire. FBS does not sponsor or obtain work authorization unless explicitly stated.
•Exclusivity of Employment and Conflict of Interest: Upon acceptance of an offer and during employment with FBS, employees will not be permitted to engage in parallel employment, professional activities, or paid work for other entities. Any ownership, partnership, directorship, or participation in other businesses or companies must be fully disclosed and formally reviewed in accordance with FBS internal conflict‑of‑interest and external engagement policies prior to the start date or as soon as such circumstances arise.
Failure to comply with these conditions may impact the hiring decision or employment continuation.