GRC Analyst II

TekWissen LLC; Seattle (WA); Hybrid; USD 96,000 - 152,000; Part time

Job summary

TekWissen Group is seeking a GRC Analyst II for a 3-month temporary assignment in Seattle, WA. This hybrid role focuses on privacy risk assessment, DSAR handling, and cross-functional collaboration with Legal, IT and Cybersecurity teams.

The ideal candidate will have 2+ years of privacy experience, familiarity with PIPEDA and U.S. state privacy laws, and knowledge of privacy platforms such as OneTrust or TrustArc. IAPP certifications are strongly preferred.

Qualifications

• Minimum 2+ years of privacy experience.
• IAPP certification (CIPP/US, CIPM, or CIPT) strongly preferred.
• Bachelor's or master's degree in information technology, Computer Science, Cybersecurity, or related field.

Responsibilities

• Lead end-to-end privacy impact assessments across apps, systems, and processes.
• Evaluate privacy risks and document mitigation strategies for partner teams.
• Collaborate with Legal, IT, and Cybersecurity to align privacy controls.
• Identify opportunities to improve privacy assessment processes and data mapping.
• Respond to DSARs and support audit or maturity assessment initiatives.
• Lead incident response for privacy-related events.

Skills

Privacy regs

DSAR handling

Risk assessment

Privacy platforms

Attention to detail

Education

Bachelor's in IT/CS

Master's in IT/CS

Tools

OneTrust

TrustArc

Job description

Overview:

TekWissen is a global workforce management provider headquartered in Ann Arbor, Michigan that offers strategic talent solutions to our clients world-wide. The below job opportunity is to one of Our clients Who is a fashion specialty retailer founded on a simple idea: offer each customer the best possible service, quality, value, and selection. We are looking for an individual to provide specialized Information Technology support for our strategic business partners within the client Corporate Center.

Job Title: GRC Analyst II

Location: Seattle,WA 98101

Duration: 3 Months

Job Type: Temporary Assignment

Work Type: Hybrid

Job Description :

• Lead end-to-end privacy impact assessments, including assessments of first- and third-party applications, systems and business processes, and identification of privacy and technological considerations and gaps based on applicable laws, regulations and business requirements
• Evaluate complex privacy risks and document recommended mitigation strategies for partner teams to execute.
• Collaborate with cross-functional teams to implement effective privacy controls Collaborate with Legal, IT, and Cybersecurity teams to ensure privacy controls are aligned and reflect ongoing changes to Nordstrom risk and compliance posture
• Identify opportunities for operational improvements in privacy assessment processes, data mapping tools, and documentation, escalating implementation decisions to leadership as appropriate
• Assist with audit or maturity assessment initiatives Respond to and fulfill complex data subject access requests (DSARs)
• Maintain and supplement data mapping and governance documentation Support rollout of privacy-enhancing technologies and tools Identify and escalation potential privacy risks or threats and recommend mitigation strategies Lead incident response processes for privacy-related events

Experience:

• 2+ years of privacy or related experienc

Certifications:

• IAPP certification (CIPP/US, CIPM, or CIPT) strongly preferred

Skills:

• Strong working knowledge of Canadian (PIPEDA) and U.S. state-level privacy regulations (CCPA, OCPA, Colorado AI Act, Illinois BIPA) and sectoral privacy laws (e.g. CASL, FCRA, HIPAA, CAN-SPAM, COPPA). Experience with privacy management platforms (e.g. OneTrust, TrustArc). Strong attention to detail, quality and consistency in both written and verbal communications

Education:

• Bachelor's degree or master's in information technology, Computer Science, Cybersecurity or related experience required.

TekWissen Group is an equal opportunity employer supporting workforce diversity.