Privacy Analyst

CloudWalk; United States; Remote; USD 100,000 - 150,000; Full time

Job summary

CloudWalk in the United States is seeking a privacy/compliance professional to support privacy governance, DPIAs, DSRs, and retention-rule reviews across products and partnerships. The role involves collaborating with product, engineering, security, legal and business teams to embed privacy by design and address risks in vendors and contracts.

You will assist privacy and security incident response, perform risk assessments, containment, and remediation tracking, and review incident playbooks and

Responsibilities

• Support privacy compliance and governance activities, including DSRs and the preparation or review of RIPDs/DPIAs, LIAs, retention rules and LGPD procedures.
• Partner with Product, Engineering, Security, Legal and business teams to review products, technical implementations, vendors and contracts, embedding privacy by design and addressing identified risks.
• Support privacy and security incident response involving personal data, including triage, containment, privacy risk assessment, notification analysis, root cause analysis and remediation tracking.
• Assess incident scope and severity by identifying affected systems, data categories, impacted data subjects, logs, APIs, databases and exposure vectors.
• Review privacy, security and data governance documentation, including incident response playbooks, technical procedures and access control materials.

Job description

• Support privacy compliance and governance activities, including DSRs and the preparation or review of RIPDs/DPIAs, LIAs, retention rules and LGPD procedures;
• Partner with Product, Engineering, Security, Legal and business teams to review products, technical implementations, vendors and contracts, embedding privacy by design and addressing identified risks.
• Support privacy and security incident response involving personal data, including triage, containment, privacy risk assessment, notification analysis, root cause analysis and remediation tracking;
• Assess incident scope and severity by identifying affected systems, data categories, impacted data subjects, logs, APIs, databases and exposure vectors;
• Review privacy, security and data governance documentation, including incident response playbooks, technical procedures and access control materials;