Juan Meza
Compliance Analyst 2 - IT Privacy @Costco Wholesale
Signup · Get unlimited contacts
WORK HISTORY
Compliance Analyst 2 - IT Privacy @Costco Wholesale
Seattle, WA, US
Providing effective communication expertise when working one on one with a team member or Costco stakeholders company wide and in a group setting as in our team meetings. Tasks such as noticing discrepancies with our Privacy Data Subject Request records where I have to reach out to the system expert in Data Governance teams to explain the exact issue with details and what I should be seeing. I follow up with a system expert on multiple email responses until the issue was resolved and later giving presentations describing my processes to teammates and stakeholders. These include personnel in Costco Travel, e-commerce, Marketing, and Costco Membership divisions. Being agile and flexible to take on numerous tracks involving Privacy Threshold Analysis for companies being used by Costco and reviewing those new customers to see if they have the appropriate security safeguards to protect personal information. Also being nimble to take on the Data Subject Requests from Costco members and non-members who want access to their personal information or want to delete their marketing profiles and personal information from our various Costco databases. Pushing initiative in creating SOP’s (standard operating procedure) and documentation on Google Docs/Sheets/Slides regarding my processes on verifying Data Subject Requests, the apps and tools used to run scans that fetch the desired data and comparing the personal data we find to what is in our Costco databases in order to create a report for the consumer.
EDUCATION
University of Idaho
Bachelor's degree, Business Management & Human Resource Management
Washington State University
Master of Arts (M.A.), Sport and Fitness Administration/Management
ABOUT JUAN MEZA
As a team captain, I am working to ensure supplier security and privacy assurance (SSPA) compliance with Microsoft\'s 56 data processing requirements across personal and confidential data, SAAS, PCI, website, and Microsoft Funding. • Analyzing escalated cases and data protection requirements (DPR) exceeding company’s goal of ten daily cases; communicating results to Microsoft business owner and third-party companies. • Manage data security frameworks and regulatory standards for purchase orders, including PCI-DSS documentation, SOC2/3 reports, ISO27001 and 27701, penetration test, and independent assessments. • Developing security and compliance reporting for executive management, shareholders, and suppliers based on data class, processing scope, processing designation, and spend category. • Understanding vendor privacy/PCI/CCPA/GDPR risk assessments of data processing role and scope and collaborating with company business owners to identify compliance solutions. • Review suppliers’ cloud data security for Microsoft Azure, Google LLC, and AWS to obtain SaaS approval.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.