Seattle, Washington, United States
Program Manager with 12+ years of experience minimizing compliance risk and ensuring high-quality customer experiences. Information Privacy/Compliance advocate passionate about using industry experience and knowledge to continually improve systems and processes. Talented at analyzing data to find potential issues and developing solutions that serve both the customer and the business. Ability to present technical concepts to diverse audiences that span marketing and business operations, engineers, and executives. Proven track record building and maintaining strong working relationships with customers and stakeholders. Experience leading global, cross-functional teams and aligning groups to reach a common goal. Strong technical acumen with the ability to create software feature specifications and prioritize features for a variety of products and cloud services across multiple platforms. PMP, CIPM, and CIPP-E certified. • Information Privacy Protection • Program Manager • Privacy Analyst • Risk & Compliance • International Risk & Compliance
• Lead and manage the Data Protection Impact Assessment (DPIA) program. • Developed and track privacy metrics to ensure compliance, measure operational efficiency, track process improvements, and enhance decision-making. • Design and implement privacy policies, procedures, and best practices to respond to new regulations and trends such as Artificial Intelligence • Conduct complex privacy impact assessments (PIAs), identify risks, and recommend mitigation strategies. • Oversee and respond to data access requests. • Drive privacy web compliance, such as cookie compliance. • Collaborate with legal, engineering, and other compliance teams to address privacy-related issues. • Evangelize privacy strategy and solutions throughout the organization, through such activities as developing and delivering privacy training and other content, and stakeholder engagement.
Advocate, speaker, and educator on privacy, software internationalization, and culture. • Developed and delivered international risk curriculum to compete in a competitive and changing market. • Guest lecturer international privacy and Chinese regulatory compliance. • Developed and delivered international risk curriculum for a local language service provider to provide them with knowledge needed to compete in a competitive and changing market.
• Perform complex privacy reviews and ensure privacy reviews are appropriately documented. • Support implementation of privacy-related business control, associated reporting, and remediation activities. • Engage with other compliance, privacy, legal teams as necessary. • Create PIAs and DPIAs in conjunction with partner teams. • Manage the design, implementation, maintenance, and enforcement of privacy policies, procedures, and controls. • Work to develop and maintain privacy systems, tools, and processes to ensure compliance with privacy policies and standards. • Escalate high risk and complex issues and coordinate remediation with key stakeholders. • Evangelize privacy strategy and solutions throughout the organization, through such activities as developing and delivering privacy training and other content, and stakeholder engagement.
Established compliance program at a start-up. • Develop and oversee control systems to prevent or deal with violations of legal guidelines and internal policies • Evaluate the efficiency of controls and improve them continuously • Revise procedures, reports etc. periodically to identify hidden risks or non-conformity issues • Draft, modify and implement company policies • Work with partner teams, including corporate counsel, to monitor enforcement of standards and regulations • Assess the business’s future ventures to identify possible compliance risks • Review the work of colleagues when necessary to identify compliance issues and provide advice or training • Keep abreast of regulatory developments within or outside of the company as well as evolving best practices in compliance control • Prepare reports for senior management and external regulatory bodies as appropriate
Policy researcher and analyst consulting on language, culture, regulatory, and compliance projects. • Research and resolve ambiguity surrounding compliance policy and implementation for a variety of product teams including marketing, engineering, business operations, and applications. • Partner with the Global Readiness team at Microsoft to research, analyze, and craft policy on cultural, legal, and compliance ecosystem that impacts world markets. • Assess compliance with internal policy and propose mitigations for a variety of clients, helping to reduce PR and Legal risk. • Designed a central repository to report language, market, competitor features, and socio-economic data to forecast needs for 252 markets that enables management and partners to make strategic decisions. • Collaborate with internal stakeholders and research data needs based on project scope to develop best practices that ensures consistent delivery of accurate data.