GRC Data Analyst- Seattle, WA

Confiz; Seattle (WA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Confiz is hiring a GRC Data Analyst / Program Management professional to advance the privacy program by partnering with business and IT teams, leading privacy-related projects, identifying risks and required controls, ensuring alignment with applicable privacy laws and company standards, and escalating complex issues when senior-level guidance is needed.

This is a hybrid role, based in Seattle, WA. Onsite presence of 4 days per week is expected Monday through Thursday, Remote Fridays.

Qualifications

• Education: Bachelor’s degree or master’s in information technology, Computer Science, Cybersecurity or related experience.
• Experience: 2+ years of privacy or related experience.
• Certifications: IAPP certification (CIPP/US, CIPM, or CIPT) strongly preferred.
• Skills: Strong working knowledge of Canadian (PIPEDA) and U.S. state-level privacy regulations (CCPA, OCPA, Colorado AI Act, Illinois BIPA) and sectoral privacy laws.

Responsibilities

• Lead end-to-end privacy impact assessments for applications, systems and business processes.
• Evaluate privacy risks and document mitigation strategies for partner teams.
• Collaborate with Legal, IT, and Cybersecurity to align privacy controls.
• Identify opportunities to improve privacy assessment processes and tools.
• Assist with audit or maturity assessment initiatives.
• Respond to and fulfill complex data subject access requests (DSARs).
• Maintain data mapping and governance documentation.
• Support rollout of privacy-enhancing technologies and tools.
• Identify and escalate potential privacy risks and mitigate accordingly.
• Lead incident response processes for privacy-related events.

Skills

Data analysis

Privacy regulations

GRC

Stakeholder management

Project management

Education

Bachelor’s or Master’s degree in IT/CS/Cybersecurity

Tools

OneTrust

TrustArc

Job description

Confiz is hiring a GRC Data Analyst / Program Management professional to support privacy assessment and compliance initiatives. This role will help advance the privacy program by partnering with business and IT teams, leading privacy-related projects, identifying risks and required controls, ensuring alignment with applicable privacy laws and company standards, and escalating complex issues when senior-level guidance is needed.

This is an opportunity to combine data analysis, project/program management, privacy, risk, and cross-functional stakeholder management in a high-impact environment.

This is a hybrid role, based in Seattle, WA.

Onsite presence of 4 days per week is expected Monday through Thursday, Remote Fridays

Responsibilities

• Lead end-to-end privacy impact assessments, including assessments of first- and third-party applications, systems and business processes, and identification of privacy and technological considerations and gaps based on applicable laws, regulations and business requirements
• Evaluate complex privacy risks and document recommended mitigation strategies for partner teams to execute. Collaborate with cross-functional teams to implement effective privacy controls
• Collaborate with Legal, IT, and Cybersecurity teams to ensure privacy controls are aligned and reflect ongoing changes to risk and compliance posture
• Identify opportunities for operational improvements in privacy assessment processes, data mapping tools, and documentation, escalating implementation decisions to leadership as appropriate
• Assist with audit or maturity assessment initiatives
• Respond to and fulfill complex data subject access requests (DSARs)
• Maintain and supplement data mapping and governance documentation
• Support rollout of privacy-enhancing technologies and tools
• Identify and escalation potential privacy risks or threats and recommend mitigation strategies
• Lead incident response processes for privacy-related events

Qualifications

• Education: Bachelor’s degree or master’s in information technology, Computer Science, Cybersecurity or related experience required.
• Experience: 2+ years of privacy or related experience
• Certifications: IAPP certification (CIPP/US, CIPM, or CIPT) strongly preferred
• Skills: Strong working knowledge of Canadian (PIPEDA) and U.S. state-level privacy regulations (CCPA, OCPA, Colorado AI Act, Illinois BIPA) and sectoral privacy laws (e.g. CASL, FCRA, HIPAA, CAN-SPAM, COPPA). Experience with privacy management platforms (e.g. OneTrust, TrustArc). Strong attention to detail, quality and consistency in both written and verbal communications

We have a global team of amazing individuals working on highly innovative enterprise projects & products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast growth fintech, and multiple Silicon Valley startups. What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000-1:2018 (ITSM) and ISO 14001:2015 (EMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun.

People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves.

To know more about Confiz, visit: https://www.linkedin.com/company/confiz/