Privacy Analyst

Eastman Industrial Supply, Inc.; São Paulo; Hybrid; BRL 80,000 - 130,000; Full time

Job summary

Eastman Industrial Supply, Inc. in São Paulo seeks a detail-oriented Privacy Analyst to join the Legal team.

You will support our global privacy program, coordinating data subject rights requests, maintaining processing records, and assisting with impact assessments for systems, vendors, and AI tools. The role includes reviewing supplier privacy questionnaires and contract terms, handling privacy incidents, and developing training materials.

Qualifications

• A degree in Law or a related program with privacy experience.
• Professional fluency in written and spoken Portuguese and English.
• Strong organization and attention to detail while handling confidential information.
• Preferred: privacy certification (CIPP/E, CIPM, CIPT) or willingness to earn one.

Responsibilities

• Coordinate data subject and consumer rights requests.
• Maintain data inventories and processing records.
• Assist with privacy transfer impact assessments for systems, vendors, AI tools, and projects.
• Review supplier privacy questionnaires and contract terms.
• Coordinate privacy incident and data breach responses.
• Maintain privacy policies and notices; develop training materials.
• Support program reporting, audits, and compliance reviews.
• Provide paralegal support for the Latin America Regional Lawyer (up to one day per week).

Skills

Privacy compliance

Portuguese fluency

English fluency

Attention to detail

Data protection

Education

Law degree or related program

Tools

OneTrust

Microsoft 365

Job description

We are a global chemical company looking for a detail-oriented Privacy Analyst to join our Legal team. You will be based in São Paulo and work closely with the Privacy Manager in the U.S. to support our global privacy and data protection program. You'll gain broad, hands-on experience with a range of privacy laws, including the EU and UK GDPR, US federal and state privacy laws, China's PIPL, Brazil's LGPD, and other national frameworks. The work covers employee, customer, supplier, and occupational health data in a complex, multinational industrial company.

Support the company’s global privacy and data protection program, working with colleagues across regions and business functions. Responsibilities include coordinating data subject and consumer rights requests; maintaining data inventories and processing records; assisting with privacy and transfer impact assessments for systems, vendors, AI tools, and projects; and supporting international data transfer requirements.

The role also helps review supplier privacy questionnaires and contract terms, coordinate privacy incident and data breach responses, maintain privacy policies and notices, develop training and awareness materials, and support program reporting, audits, and compliance reviews.

Up to one day per week, the analyst will provide paralegal support to the Latin America Regional Lawyer, including help with commercial contracts, legal matter tracking, corporate records, legal research, outside counsel coordination, and file management.

Qualifications

Required: A degree in Law or a related technical, paralegal, or bachelor’s program, such as Information Management, Compliance, or Business Administration; experience in privacy and data protection; professional fluency in written and spoken Portuguese and English; strong organization and attention to detail; and sound judgment when handling confidential information.

Preferred: A privacy certification, such as IAPP CIPP/E, CIPP/US, CIPM, or CIPT, or willingness to earn one; familiarity with privacy laws such as Brazil’s LGPD, the GDPR, China’s PIPL, or U.S. state privacy laws; experience with OneTrust, Microsoft 365, or corporate and commercial paralegal work; and Spanish-language skills. Interest in AI governance and responsible data use is also valued.

The successful candidate will bring integrity, analytical thinking, clear cross-cultural communication, collaboration, initiative, and a willingness to learn in a changing global regulatory environment.