About BFSFCU:

Bank-Fund Staff Federal Credit Union (BFSFCU) is a full-service financial cooperative that was organized and chartered in 1947 as a convenient place for employees of the World Bank Group and International Monetary Fund and their families to save and to obtain credit. Located in Washington, DC, BFSFCU maintains three full-service branches in downtown as well as a full-service Lending Center near Farragut West metro station.

Summary:

As a Contracts and Privacy Paralegal this role will be responsible for providing support to the Bank Fund by reviewing contracts, maintaining contract and privacy workflows, conducting impact assessments, reporting key performance metrics, and collaborating with others across the organization to ensure adherence to pre-determined contractual guardrails and safeguarding of member personal information.

Works with the Director of Legal and Privacy to support the implementation and maintenance of organization contractual guardrails, privacy risk assessments, data subject access requests, identifying contractual, privacy and data risks, working with third parties in support of the privacy program, and administering contract workflows and contract and privacy process integrations across the organization.

Responsibilities:

• Oversee contract intake requests for the risk management team through contract workflows
• Support the redlining process for vendor contracts, including reviewing redlined agreements, creating redlined drafts for both internal and external/third party review, and preparing final versions of contracts for execution
• Assist and provide support for contract review and revisions, contract negotiations, and work with standard contract documents (DPA, MSA, NDA) to facilitate contract completion.
• Propose contract modifications as needed and track contract negotiations via internal workflows.
• Organize and support various privacy-related functions including privacy impact assessments, privacy complaints, privacy data subject requests, data breach incident response, and other privacy compliance activities.
• Prepare and maintain key metrics reporting.
• Interact with business units across the organization (e.g., third party management, operations, information technology, project management) and third parties to effectively manage privacy and contract assessments and workflows.
• Research and analyze statutes, regulations, legal articles, judicial decisions, and other legal sources on a variety of topics including data privacy, third party agreements, etc.
• Prepare, organize, and retrieve applicable files, contracts and records as necessary
• Successfully participate in annual Information Security refresher training. Comply with the Information Security Policy, including the immediate reporting of unusual or suspicious activity to management and the Information Security Officer. Follow all procedures to protect company computers from viruses, and to maintain the security and confidentiality of Credit Union data.
• Participate in annual Bank Secrecy Act (BSA) and Office of Foreign Assets Control (OFAC) training and demonstrate knowledge and understanding of the BSA and OFAC, including the immediate reporting of unusual or suspicious activity to the Risk Management Department. Undertake additional training specific to daily responsibilities and as required to ensure continued compliance with all applicable regulations.
• Ensure the BFSFCU safe harbor protections as allowed by the BSA. Understand that if confronted with knowledge of existence of a Suspicious Activity Report (SAR), an obligation exists to preserve the confidentiality of that SAR, as well as any information that may reveal the existence of a SAR. Maintain awareness of, and immediately report to the Compliance Officer, any unauthorized disclosure of a SAR, or unauthorized disclosure of information related to a SAR. Understand that failure to do so is a violation of federal law and may lead to both civil and criminal penalties for SAR disclosure violations.
• Perform other special assignments and projects as assigned from time to time

Education, experience, and knowledge/abilities required for competent performance in the job:

• Bachelor’s degree or equivalent combination of education and experience.
• Paralegal certificate required
• 3 plus years of paralegal experience handling contractual matters.
• Experience with IT contracts preferred.
• Experience with privacy compliance services valued.

Ability to:

• Present superior analytical and organizational skills with strong attention to detail.
• Display exceptional interpersonal and communication skills
• Demonstrate a high level of discretion and sound judgment
• Highly proficient with Microsoft Office (including PowerPoint) or related software
• Strong analytical and problem-solving skills
• Highly organized, detail-oriented, high degree of accuracy and consistency
• Experience with contract management and electronic signature software (e.g., Adobe Sign, DocuSign) beneficial but not required

For internal purposes, this position is graded as NE-10