Hybrid GRC Data & Privacy Program Analyst

Confiz Limited; Seattle (WA); Hybrid; USD 85,000 - 115,000; Full time

Job summary

Confiz Limited in Seattle is seeking a GRC Data Analyst / Program Management professional to support privacy assessment and compliance initiatives. This role will help advance the privacy program by partnering with business and IT teams, leading privacy-related projects, identifying risks and required controls, ensuring alignment with applicable privacy laws and company standards, and escalating complex issues when senior-level guidance is needed.

This is a hybrid role, based in Seattle, WA.

Qualifications

• Education: Bachelor’s or Master’s in IT, CS, Cybersecurity or related field.
• 2+ years of privacy or related experience.
• IAPP certifications (CIPP/US, CIPM, CIPT) strongly preferred.
• Strong knowledge of US (CCPA, OCPA, HIPAA, CAN-SPAM) and Canadian privacy laws.

Responsibilities

• Lead end-to-end privacy assessments for apps, systems and processes.
• Document risk and mitigation strategies; collaborate with partners to implement controls.
• Work with Legal, IT and Cybersecurity to align privacy controls with changes.
• Improve privacy assessment processes, data mapping tools and docs.
• Assist with audits or maturity assessments.
• Respond to complex data subject access requests (DSARs).
• Maintain data mapping and governance documentation.
• Support rollout of privacy-enhancing tools.
• Elevate potential privacy risks and recommend mitigations.
• Lead incident response for privacy-related events.

Skills

Privacy regulations knowledge

Privacy management platforms

Attention to detail

Education

Bachelor’s degree or Master’s in IT / CS / Cybersecurity

Tools

OneTrust

TrustArc

Job description

Confiz Limited in Seattle is seeking a GRC Data Analyst / Program Management professional to support privacy assessment and compliance initiatives. This role will help advance the privacy program by partnering with business and IT teams, leading privacy-related projects, identifying risks and required controls, ensuring alignment with applicable privacy laws and company standards, and escalating complex issues when senior-level guidance is needed.

This is a hybrid role, based in Seattle, WA.