Privacy Analyst

Vaco; Brentwood (TN); Hybrid; USD 125,000 - 150,000; Full time

Job summary

Vaco is seeking a Privacy Analyst to join our privacy and AI governance function in Nashville. This role emphasizes writing and research over traditional cybersecurity engineering, turning complex privacy questions into clear, defensible documentation.

Youll partner with data engineering, product, and commercial teams to assess how data is used, identify privacy and security considerations, and produce detailed reports.

Qualifications

• Exceptional writing and editing skills.
• Experience producing detailed reports, assessments, or audit documentation.
• Experience in data privacy, GRC, cybersecurity risk, or security compliance.
• Familiarity with SOC 2 and auditing concepts.
• Willingness to use generative AI tools to streamline work.

Responsibilities

• Research privacy, data security, compliance, and risk questions.
• Write, edit, and review detailed privacy and security reports.
• Turn technical input into clear documentation for varied audiences.
• Manage and respond to privacy requests across the organization.
• Interview stakeholders to gather information and identify gaps.
• Evaluate security and compliance controls and related risks.
• Help document privacy methodologies and data protection techniques.
• Maintain accuracy and consistency across complex documentation.
• Develop templates and repeatable workflows as the privacy function grows.
• Use AI tools like Claude and OpenAI to streamline routine work while ensuring accuracy.

Skills

Professional writing

Editing

Research skills

Attention to detail

Job description

Privacy Analyst

Location:Nashville, TN

Salary:$125,000–$150,000

Employment Type:Full-Time, Direct Hire

Schedule:Hybrid, 4 days on site with flexibility

About the Role

We are looking for a Privacy Analyst to join a growing privacy and AI governance function within a fast-moving data and technology company.

This is not a traditional cybersecurity engineering role, nor is it strictly a legal privacy position. It's a writing- and research-intensive role for someone who enjoys digging into complex privacy, security, and compliance questions and turning technical information into clear, accurate documentation.

A significant portion of your time will be spent researching, writing, reviewing, and editing detailed reports. You'll partner with data engineering, implementation, product, and commercial teams to understand how data is being used, identify privacy and security considerations, and document findings in a consistent and defensible way.

If you have a background in data privacy, GRC, cybersecurity risk, technology risk, IT audit, security compliance, or consulting and you're an exceptional writer, this could be a strong fit.

What You'll Do

• Research privacy, data security, compliance, and risk questions involving new data types and use cases
• Write, edit, and review detailed, fact-heavy privacy and security reports
• Turn technical input from engineering and implementation teams into clear, concise documentation
• Manage and respond to privacy requests submitted by teams across the organization
• Interview internal stakeholders to gather information and identify gaps or additional questions
• Evaluate security and compliance controls and the risks those controls are designed to mitigate
• Help document privacy methodologies related to data protection and de-identification
• Perform detailed research to support privacy and security conclusions
• Maintain accuracy and consistency across complex documentation
• Help develop templates, processes, and repeatable workflows as the privacy function grows
• Use AI tools such as Claude and OpenAI to streamline routine work while maintaining ownership of research, judgment, and accuracy

What We're Looking For

• Exceptional professional writing and editing skills
• Experience producing detailed reports, assessments, audit documentation, research, or similar written deliverables
• Experience in one or more of the following areas:
  • Data privacy
  • GRC / Governance, Risk and Compliance
  • Cybersecurity risk
  • Technology risk
  • Security compliance
  • IT audit
  • Privacy operations
  • Cybersecurity or risk consulting
• Working knowledge of security and compliance auditing, including concepts such as SOC 2
• Strong research and analytical skills with an auditor-style attention to detail
• Ability to gather information from technical stakeholders and translate it for different audiences
• Comfort working with ambiguity and researching unfamiliar topics
• Experience using or willingness to regularly use generative AI tools
• Ability to thrive in a growing organization where processes and priorities can change quickly

What Will Make You Stand Out

• Big 4, consulting, cybersecurity consulting, technology risk, or audit experience
• Experience with privacy assessments, security assessments, compliance audits, or GRC programs
• Experience working with sensitive or regulated data
• Exposure to AI governance, AI privacy, data privacy, or de-identification
• Strong long-form writing, legal drafting, research, or technical documentation experience
• Experience taking complex subject matter and creating documentation that is accurate, concise, and easy to follow

By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions.