Privacy Analyst

Eastman; São Paulo; Hybride; BRL 120 000 - 240 000; Plein temps

Résumé du poste

Eastman in São Paulo is seeking a privacy-focused Analyst to join our Legal team on-site with optional remote Fridays. The role collaborates with the Privacy Manager in the U.S.

to support global privacy and data protection across employee, customer, supplier, and health data. Responsibilities include handling data subject requests, maintaining data inventories, conducting privacy risk assessments, and supporting training, audits, and incident response.

Qualifications

• Required: A degree in Law or related field; privacy/data protection experience; professional fluency in Portuguese and English; strong organization and discretion.
• Preferred: Privacy certifications (IAPP CIPP/E, CIPP/US, CIPM, CIPT) or willingness to earn; familiarity with LGPD, GDPR, PIPL, U.S. state privacy laws; experience with OneTrust and MS 365; Spanish skills.
• Integrity, analytical thinking, clear cross-cultural communication, collaboration, initiative, and adaptability in a global regulatory environment.

Responsabilités

• Coordinate data subject and consumer rights requests; maintain data inventories and processing records; assist with privacy impact assessments for systems, vendors, AI tools, and projects.
• Support international data transfer requirements; review privacy questionnaires and contract terms; coordinate privacy incident and data breach responses; maintain privacy policies and notices; develop training and awareness materials; support program reporting, audits, and compliance reviews.
• Provide paralegal support to the Latin America Regional Lawyer up to one day per week, including help with contracts, legal matter tracking, corporate records, legal research, outside counsel coordination, and file management.

Connaissances

Privacy

Data Protection

Portuguese

English

Formation

Law degree or related

Outils

OneTrust

Microsoft 365

Description du poste

Responsibilities

Location: São Paulo Working Model: On-Site Mon-Thu, Remote: Friday We are a global chemical company looking for a detail-oriented Privacy Analyst to join our Legal team. You will be based in São Paulo and work closely with the Privacy Manager in the U.S. to support our global privacy and data protection program. You'll gain broad, hands-on experience with a range of privacy laws, including the EU and UK GDPR, US federal and state privacy laws, China's PIPL, Brazil's LGPD, and other national frameworks. The work covers employee, customer, supplier, and occupational health data in a complex, multinational industrial company. Support the company’s global privacy and data protection program, working with colleagues across regions and business functions. Responsibilities include coordinating data subject and consumer rights requests; maintaining data inventories and processing records; assisting with privacy and transfer impact assessments for systems, vendors, AI tools, and projects; and supporting international data transfer requirements. The role also helps review supplier privacy questionnaires and contract terms, coordinate privacy incident and data breach responses, maintain privacy policies and notices, develop training and awareness materials, and support program reporting, audits, and compliance reviews. Up to one day per week, the analyst will provide paralegal support to the Latin America Regional Lawyer, including help with commercial contracts, legal matter tracking, corporate records, legal research, outside counsel coordination, and file management.

Qualifications

Required: A degree in Law or a related technical, paralegal, or bachelor’s program, such as Information Management, Compliance, or Business Administration; experience in privacy and data protection; professional fluency in written and spoken Portuguese and English; strong organization and attention to detail; and sound judgment when handling confidential information. Preferred: A privacy certification, such as IAPP CIPP/E, CIPP/US, CIPM, or CIPT, or willingness to earn one; familiarity with privacy laws such as Brazil’s LGPD, the GDPR, China’s PIPL, or U.S. state privacy laws; experience with OneTrust, Microsoft 365, or corporate and commercial paralegal work; and Spanish-language skills. Interest in AI governance and responsible data use is also valued. The successful candidate will bring integrity, analytical thinking, clear cross-cultural communication, collaboration, initiative, and a willingness to learn in a changing global regulatory environment.