Cybersecurity Business Analyst — Data Risk – Multiple Offices (Hybrid)

Littler; Minneapolis (MN); Hybrid; USD 138,000 - 152,000; Full time

Benefits offered by this job

Health, dental and vision plan

401(k) plan

Paid time off

Parental leave

Wellness program

Job summary

Littler is hiring a Cybersecurity Business Analyst - Data Risk to identify, analyze, and remediate risks to sensitive data across its lifecycle in a hybrid role. The position collaborates with Security, Privacy, Risk, IT, and business teams to translate data protection needs into actionable controls and clear reporting for leadership.

The role supports data classification, DLP, and regulatory requirements (GDPR, CCPA, HIPAA where applicable) and generates metrics to monitor the firm’s data risk

Qualifications

• Gather and document business and security requirements for data protection initiatives.
• Build dashboards and reports on data risk, exposure, and remediation progress for leadership.
• Perform root-cause and trend analysis on data incidents and DLP alerts.
• Support audits and client assessments with data risk evidence and documentation.

Responsibilities

• Data risk analysis and assessment: Maintain inventory of sensitive and regulated data, data flows, systems, and third-party sharing; conduct risk assessments; analyze data classification, access, retention, and handling; quantify and prioritize data risks and track remediation to closure.
• Data governance and controls: Support data classification, DLP, and data protection policies; translate privacy/regulatory requirements into data control requirements; partner with control owners to define, document, and validate data safeguards; monitor control effectiveness and produce metrics.
• Requirements, reporting, and analysis: Gather and document requirements; build dashboards and reports for leadership; perform root-cause and trend analysis on incidents; support audits with evidence.
• Stakeholder enablement and collaboration: Serve as liaison between Security, Privacy, Risk, IT, and business stakeholders; translate data risks into clear business language; provide guidance to meet compliance obligations; support response to data-related incidents and control failures.

Skills

Data risk analysis

Stakeholder collaboration

Requirements gathering

Business communication

Education

Bachelor's degree in a relevant field

Tools

OneTrust

Microsoft Purview

ServiceNow

Excel

Power BI

SQL

Job description

The Cybersecurity Business Analyst - Data Risk, is responsible for identifying, analyzing, and helping remediate risks to the firm’s sensitive and regulated data throughout its lifecycle. The role bridges security, privacy, compliance, and business teams—translating data protection requirements into actionable controls, clear reporting, and prioritized risk decisions that reduce exposure while enabling the business.

This is a hybrid position and can be resident in Phoenix, AZ; Atlanta, GA; Minneapolis, MN; Seattle, WA; Charlotte, NC; Miami or Orlando, FL; or Dallas, TX, with an onsite expectation of once per month.

Pursuant to Washington and Minneapolis regulations, the salary range is $137,800 to $151,600 annually and includes eligibility for performance-based bonuses. Factors which may affect starting pay within this range may include geography/market, skills, education, experience and other qualifications of the successful candidate. We offer generous compensation and benefits packages. For more information visit: https://www.littler.com/benefits/state-details.

Responsibilities

Data risk analysis and assessment

• Maintain an inventory of sensitive and regulated data, data flows, systems, and third-party sharing.
• Conduct data risk assessments covering confidentiality, integrity, availability, and regulatory exposure.
• Analyze data classification, access, retention, and handling to identify gaps and control weaknesses.
• Quantify and prioritize data risks, and track remediation activities through to closure.

Data governance and controls

• Support data classification, DLP, and data protection policies and standards.
• Translate privacy and regulatory requirements (e.g., GDPR, CCPA, HIPAA where applicable) into data control requirements.
• Partner with control owners to define, document, and validate data safeguards.
• Monitor control effectiveness and produce metrics on the firm’s data risk posture.

Requirements, reporting, and analysis

• Gather and document business and security requirements for data protection initiatives.
• Build dashboards and reports on data risk, exposure, and remediation progress for leadership.
• Perform root-cause and trend analysis on data incidents, DLP alerts, and access anomalies.
• Support audits and client assessments with data risk evidence and documentation.

Stakeholder enablement and collaboration

• Serve as a liaison between Security, Privacy, Risk, IT, and business stakeholders.
• Translate technical data risks into clear business language and actionable recommendations.
• Provide guidance that helps teams handle data safely and meet compliance obligations.
• Support response to data-related incidents, findings, and control failures.

Qualifications

Preferred qualifications

• Experience in a legal, professional services, or other highly regulated environment.
• Familiarity with data governance and risk platforms (e.g., OneTrust, Microsoft Purview, ServiceNow).
• Comfort with data analysis and visualization tools (e.g., Excel / Power BI) and basic querying (e.g., SQL).

Certifications

• Core security / risk: CISM, CRISC, or CISSP.
• Data / privacy: CIPP, CIPM, or CDPSE.
• Governance / analysis: ISO/IEC 27001 lead implementer/auditor or a recognized business analysis certification (e.g., CBAP).

About Littler

Littler is the largest global employment and labor law practice in the world exclusively devoted to representing management. With more than 1,900 attorneys in over 100 offices worldwide, Littler serves as the single source solution provider to the global employer community. Consistently recognized in the industry as a leading and innovative law practice, Littler has been litigating, mediating and negotiating some of the most influential employment law cases and labor contracts on record for over 75 years.

Littler’s unparalleled commitment to labor and employment law helps clients navigate a complex business world with nuanced legal issues—building better solutions for clients’s toughest challenges. With deep experience and resources that are local, everywhere, Littler is fully focused on its clients. With a diverse team of the brightest minds, Littler fosters a culture that celebrates original thinking. And with powerful proprietary technology, Littler disrupts the status quo—delivering bold, groundbreaking innovation that prepares employers not just for what’s happening today, but for what’s likely to happen tomorrow.

Benefits

We offer a generous benefits package to full-time and part-time employees working at least a 50% schedule. Benefits include comprehensive health, dental and vision plan for you, your spouse/domestic partner and children. In addition, we provide a superior 401(k) plan, ample time off programs, mental health programs, family building and caregiving, generous paid parental leave, life insurance, disability insurance, a wellness program, flexible spending accounts, and an employee referral bonus program.

For more information about our benefits visit: www.littler.com/benefits/state-details.

For more information about our firm visit: www.littler.com.