Sr. Analyst - Information Governance And Data Protection - PVH Corp.

Design Your Future at PVH

Sr. Analyst

• Information Governance and Data Protection

• PVH Corp.

Position Summary

The Senior Analyst

• Information Governance and Data Protection is a crucial member of our data protection team, responsible for ensuring that PVH organization's data handling and management practices are in full compliance with internal policies and external regulations. This role emphasizes ensuring the confidentiality, integrity, and availability of data, while also promoting best practices in information governance.

This position oversees the strategic planning and operational aspects of ensuring that data is handled correctly throughout its lifecycle, while also ensuring the protection of that data from threats and unauthorized access.

The Senior Analyst will be responsible for impacting decisions that incorporate the controls to protect PVH sensitive data assets while balancing the demands to optimize data utilization to assure PVH maintains its competitive advantage in a digital age.

PRIMARY RESPONSIBILITIES/ACCOUNTABILITIES OF THE JOB:

Data Protection and Compliance:

• Monitor compliance with data protection laws and regulations (e.g., GDPR, CCPA, HIPAA) and coordinate efforts to address any gaps.

• Implement and maintain data classification standards, ensuring that sensitive data is appropriately categorized and protected.

Policy Development and Maintenance:

• Collaborate with relevant departments to develop, refine, and implement information governance and data protection policies, standards, and guidelines.

• Review and update existing policies and procedures regularly to ensure they reflect current best practices and regulatory requirements.

Risk Management:

• Identify potential risks related to data processing and storage activities.

• Conduct periodic data protection impact assessments and recommend risk mitigation strategies.

Data Lifecycle Management:

• Collaborate with IT and business units to ensure that data retention schedules are followed, and that data is disposed of securely when no longer needed.

Training and Awareness:

• Develop and deliver data protection and information governance training to staff.

• Promote a culture of data protection awareness across the organization.

Incident Response:

• Assist in managing data breaches or potential incidents, ensuring timely notification to relevant stakeholders and regulatory bodies when required.

• Analyze incidents to determine root causes and recommend preventive measures.

Vendor Management:

• Evaluate the data protection capabilities of third-party vendors and service providers and work collaboratively with the PVH Vendor Risk Analyst to assure effective controls are in place.

• Ensure contractual clauses related to data protection are included in vendor agreements.

Reporting and Audits:

• Produce regular reports on the status of information governance and data protection activities.

• Support internal and external audit processes, providing necessary documentation and evidence of compliance.

QUALIFICATIONS & EXPERIENCE:

Experience:

• Bachelor's degree in Information Systems, Law, Business, or related field.

• Relevant certifications such as CIPP, CIPM, CIPT, or similar are beneficial.

• 10 years of experience in information governance, data protection, or related roles.

• Strong understanding of data protection laws and standards.

• Excellent analytical, organizational, and project management skills.

• Strong written and verbal communication skills.

• Ability to work collaboratively with diverse teams such as HR, Legal and Marketing

• Experience implementing and managing Data Loss Protection platforms such as Varonis and Microsoft Information Protection (MIP)

Education:

• Bachelor's degree in Information Systems, Law, Business, or related field.

• Relevant certifications such as CIPP, CIPM, CIPT, or similar are beneficial.

#LI-MS1

#LI-Hybrid

PVH Corp. or its subsidiary ("PVH") is an equal opportunity employer and considers all applicants for employment on the basis of their individual capabilities and qualifications, consistent with applicable law and without regard to race, color, sex, gender identity or expression, age, religion, creed, national origin, citizenship status, sexual orientation, genetic information, physical or mental disability, military status or any other characteristic protected under federal, state or local law. In addition to complying with all applicable laws, PVH also has a strong corporate commitment to inclusion, diversity and to ensuring that all current and future PVH associates are compensated solely on job-related factors such as skill, ability, educational background, work quality, experience and potential. To achieve these goals, across the United States and its territories, PVH prohibits any PVH employee, agent or representative from requesting or otherwise considering any job applicant's current or prior wages, salary or other compensation information in connection with the hiring process. Accordingly, applicants are asked not to disclose this salary history information to PVH