Senior Privacy Compliance Analyst

This is a fully remote position, open to applicants in Oregon.

📋 Description

• Lead and manage the comprehensive response to privacy incidents, encompassing intake, triage, investigation, containment, remediation, and closure.

• Escalate incidents to relevant stakeholders and leadership teams.

• Ensure accurate documentation and reporting of incidents.

• Evaluate the scope and risk of incidents to determine regulatory, contractual, or individual notification obligations.

• Draft and coordinate notifications to impacted individuals, regulators, and business partners.

• Perform root cause analysis, identify control gaps and trends, and monitor corrective and preventive actions.

• Offer guidance on privacy incident handling and compliance to business units, legal, information security, and third-party vendor stakeholders.

• Investigate complex privacy and compliance inquiries.

• Draft, revise, and enhance incident response policies, procedures, playbooks, job aids, training resources, and compliance guidance.

• Keep abreast of and interpret privacy, data protection, and breach notification laws and regulations.

• Engage in industry forums and meetings while fostering relationships with industry contacts.

• Assist with internal audits, regulatory examinations, and inquiries from regulators.

• Provide training, presentations, and guidance on incident reporting and upcoming regulatory trends.

• Develop metrics, trend analyses, and reporting related to privacy incidents.

• Identify ways to enhance privacy controls, operational procedures, and preventive measures.

⛳️ Requirements

• A Bachelor’s degree or equivalent experience in business, legal, or a related field.

• Preferred professional privacy, compliance, or security certification such as CIPP/US, CIPM, CISSP, or similar.

• 4–6+ years of experience in privacy, fraud, or information security.

• Proven experience managing privacy and security incidents from intake through investigation, risk assessment, notification, and closure.

• Ability to convert complex regulations into practical guidance.

• Capability to handle complex tasks, assess risks, and meet deadlines in a detail-oriented, time-sensitive environment.

• Fundamental knowledge of federal and state privacy, data protection, and breach notification requirements.

• Experience in coordinating incident response with information security, legal, and third-party vendors, including managing regulator inquiries after an incident is preferred.

• Preferred experience in developing playbooks, training materials, and compliance guidance.

• Exceptional verbal and written communication skills.

• Ability to prioritize competing demands, work independently, and demonstrate sound judgment and discretion.

• Strong analytical, critical thinking, and problem-solving skills.

• Ability to collaborate across functions while ensuring compliance with processes and controls.

• Must pass a criminal background investigation and meet employment, education, and licensing verification requirements.

• Must be bondable.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan with matching contributions from the company.

• Annual incentive bonus program.

• Paid time off, including 11 holidays, 2 wellness days, and 8 volunteer hours each year.

• Increased PTO with tenure.

• Opportunities for career growth and advancement.

• Paid parental leave.

• Adoption/surrogacy assistance.

• Employee giving program that matches donations to eligible nonprofits and schools twofold.

• Support for work-life balance.

• A drug- and alcohol-free workplace.