Privacy Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of the comprehensive Privacy Incident Management program, which encompasses notification workflows, escalation paths, process documentation, responder enablement, and opportunities for automation.

• Act as the Directly Responsible Individual (DRI) and Incident Commander for privacy incident response.

• Collaborate with teams across Privacy, Privacy Legal, CSIRT, Product, Engineering, and Communications to facilitate analysis, remediation, and follow-through.

• Ensure on-call readiness for privacy incident triage, severity classification, and urgent escalations.

• Lead privacy incident retrospectives.

• Monitor remediation items and identify control gaps.

• Provide incident metrics and generate reports on trends, remediation status, and the overall health of processes.

• Develop and sustain relationships with cross-functional and geographically diverse stakeholders.

• Assist with broader Privacy initiatives, tooling development, and automation projects during periods of lower volume.

• Report directly to the Head of Privacy.

⛳️ Requirements

• Minimum of 3 years of experience in privacy, security, incident response, technology risk, or a related operational risk area.

• Direct experience in leading or supporting workflows related to incidents, issues, or risks that necessitate structured analysis, documentation, and cross-functional coordination.

• Strong skills in incident management.

• Proven experience in communicating privacy risks and incident findings to both technical and non-technical audiences.

• Experience in producing written analyses of incidents, retrospective documentation, and summaries for executive-level audiences.

• Demonstrated success in leading technical investigations within cloud-native environments.

• Practical knowledge of SQL, Python, and data analysis tools such as Postgres, MongoDB, Airflow, Looker, and Snowflake.

• Experience in developing automation to minimize manual operational tasks and enhance incident response efficiency.

• Familiarity with privacy regulations and frameworks including GDPR, CCPA, PIPEDA, ePrivacy, DPIAs/PIAs, ROPA, and data subject rights.

• Understanding of privacy controls and management of privacy issues.

• Capability to responsibly utilize and build generative AI while ensuring human oversight.

🏝️ Benefits

• Equity eligibility.

• Bonus eligibility.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• 401(k).

• Quarterly in-person working sessions (“surges”).

• Reasonable accommodations for individuals with disabilities.

• Free compatible screen reader for applicants needing screen reading technology.