Title:

Company:

Job Category:

Job Description:

About Everest:
Everest is a global leader in risk management, rooted in a rich, 50+ year heritage of enabling businesses to survive and thrive, and economies to function and flourish. We are underwriters of risk, growth, progress and opportunity. We are a global team focused on disciplined capital allocation and long-term value creation for all stakeholders, who care deeply about our impact on communities and the wider world.

About the Role:

As the Data Protection Officer, you will play a critical role in developing, implementing, and overseeing our data privacy and protection initiatives. You will collaborate closely with cross-functional teams, especially within our international locations, to ensure that our data handling practices comply with relevant regulations and industry best practices, while fostering a culture of data privacy throughout the organization.  The DPO will oversee compliance with local data protection laws, including GDPR, to ensure that data protection controls are regularly tested, monitored, evidenced and enforced. This role will ensure that the risks to the rights and freedoms of data subjects associated with collection and processing of Personally Identifiable Information by European and UK operations of the company are regularly assessed and are minimized. 

Responsibilities:

• Act in and fulfill the role of the Data Protection Officer for our international entities.
• Serve as registered point of contact for the data protection authorities acting as the first point of contact for all inquiries.
• Oversee the development and implementation of data privacy and protection policies, procedures, and guidelines globally and in alignment with applicable laws and regulations (e.g., GDPR, CCPA, HIPAA).
• Monitor and assess data processing activities to ensure compliance with privacy laws and contractual obligations, including data transfer mechanisms and third-party data sharing agreements.
• Conduct regular Privacy Impact Assessments (PIAs) or Data Protection Impact Assessments (DPIAs) to identify and mitigate potential privacy risks associated with new or existing projects.
• Ensure that data subject requests such as data access, correction or deletion for individuals whose data is processed (EU and UK: employees, customers etc.), are managed and responded to within the required timeframe.
• Oversee and advise on the implementation of data classification, data mapping and flows, privacy and protection and data retention controls and procedures.
• Oversee and advise on incident response efforts in the event of a data breach, including coordination with internal and external stakeholders, timely notification, and remediation.
• Monitor controls associated with the management, retention and disposal of records are maintained.
• Report quarterly to Everest’s international boards regarding data privacy and protection compliance, control health and risk remediation activities.
• Collaborate with legal, IT, and other departments to ensure that data privacy considerations are embedded in data processing activities, system design, AI initiatives, and data handling procedures.
• Provide guidance and training to employees on data protection regulations and best practices to enhance overall awareness and compliance.
• Establish and maintain records of data processing activities, including data inventories, data flows, and data retention schedules.
• Monitor emerging trends and changes in data privacy regulations to ensure continuous alignment of policies and practices with evolving requirements.
  

Qualifications:

• Bachelor's degree in Law, Information Technology, Cybersecurity, or a related field.
• Professional certifications such as Certified Information Privacy Professional (CIPP) or equivalent are highly desirable.
• 5+ years of experience in data privacy and protection, with a strong understanding of relevant regulations and industry standards.
• Experience acting as the Data Protection Officer and interfacing with data protection authorities.
• Knowledge of U.S. and international data protection laws and regulations (e.g., GDPR, CCPA) and their implications on data handling practices.
• Excellent communication skills, with the ability to convey complex data privacy concepts to both technical and non-technical audiences.
• Strong analytical and problem-solving abilities, with a keen attention to detail.
• Experience conducting privacy impact assessments and managing data subject requests.
• Ability to work independently, manage multiple projects, and collaborate effectively across teams.
• Demonstrated commitment to staying current with developments in data privacy and protection.

What if I don’t meet every requirement? At Everest we are dedicated to building an inclusive and authentic workplace. So, if you are excited about this role but your past experience doesn’t align perfectly with every element in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles. Please let us know if you need any accommodations throughout the application or interview process.

Our Culture

At Everest, our purpose is to provide the world with protection. We help clients and businesses thrive, fuel global economies, and create sustainable value for our colleagues, shareholders and the communities that we serve. We also pride ourselves on having a unique and inclusive culture which is driven by a unified set of values and behaviors. Click here to learn more about our culture. 

• Our Values are the guiding principles that inform our decisions, actions and behaviors. They are an expression of our culture and an integral part of how we work: Talent. Thoughtful assumption of risk. Execution. Efficiency. Humility. Leadership. Collaboration. Inclusion and Belonging.
• Our Colleague Behaviors define how we operate and interact with each other no matter our location, level or function: Respect everyone. Pursue better. Lead by example. Own our outcomes. Win together.  

All colleagues are held accountable to upholding and supporting our values and behaviors across the company. This includes day to day interactions with fellow colleagues, and the global communities we serve. 

Type:

Time Type:

Primary Location:

Additional Locations: