Data Risk & Governance Analyst - Hybrid

Littler; Minneapolis (MN); Hybrid; USD 138,000 - 152,000; Full time

Benefits offered by this job

Health, dental and vision plan

401(k) plan

Paid time off

Parental leave

Wellness program

Job summary

Littler is hiring a Cybersecurity Business Analyst - Data Risk to identify, analyze, and remediate risks to sensitive data across its lifecycle in a hybrid role. The position collaborates with Security, Privacy, Risk, IT, and business teams to translate data protection needs into actionable controls and clear reporting for leadership.

The role supports data classification, DLP, and regulatory requirements (GDPR, CCPA, HIPAA where applicable) and generates metrics to monitor the firm’s data risk

Qualifications

• Gather and document business and security requirements for data protection initiatives.
• Build dashboards and reports on data risk, exposure, and remediation progress for leadership.
• Perform root-cause and trend analysis on data incidents and DLP alerts.
• Support audits and client assessments with data risk evidence and documentation.

Responsibilities

• Data risk analysis and assessment: Maintain inventory of sensitive and regulated data, data flows, systems, and third-party sharing; conduct risk assessments; analyze data classification, access, retention, and handling; quantify and prioritize data risks and track remediation to closure.
• Data governance and controls: Support data classification, DLP, and data protection policies; translate privacy/regulatory requirements into data control requirements; partner with control owners to define, document, and validate data safeguards; monitor control effectiveness and produce metrics.
• Requirements, reporting, and analysis: Gather and document requirements; build dashboards and reports for leadership; perform root-cause and trend analysis on incidents; support audits with evidence.
• Stakeholder enablement and collaboration: Serve as liaison between Security, Privacy, Risk, IT, and business stakeholders; translate data risks into clear business language; provide guidance to meet compliance obligations; support response to data-related incidents and control failures.

Skills

Data risk analysis

Stakeholder collaboration

Requirements gathering

Business communication

Education

Bachelor's degree in a relevant field

Tools

OneTrust

Microsoft Purview

ServiceNow

Excel

Power BI

SQL

Job description

Littler is hiring a Cybersecurity Business Analyst - Data Risk to identify, analyze, and remediate risks to sensitive data across its lifecycle in a hybrid role. The position collaborates with Security, Privacy, Risk, IT, and business teams to translate data protection needs into actionable controls and clear reporting for leadership.

The role supports data classification, DLP, and regulatory requirements (GDPR, CCPA, HIPAA where applicable) and generates metrics to monitor the firm’s data risk