Privacy Analyst

Gannett; United States; On-site; USD 90,000 - 110,000; Full time

Job summary

USA TODAY Co., Inc. is seeking a Privacy Analyst to support its Privacy Office in complying with privacy laws, mitigating risk, and building trust with customers and consumers.

The role covers reviewing ad tech architecture, data flows, incident response, vendor assessments, cookie management, and DPIAs. Requirements include knowledge of GDPR/CCPA, Privacy by Design, PIAs, and certifications such as IAPP CIPM/CIPP/CIPT or ISO27001.

Qualifications

• Strong understanding of data protection laws and regulations (e.g., GDPR, CCPA/CPRA).
• Strong understanding of data privacy principles, risk assessment, and mitigation.
• Experience with Privacy Enhancing Technologies (PETs) and infrastructure for enabling data analysis in a privacy-conscious manner.

Responsibilities

• Conduct architecture reviews of the ad tech stack and provide privacy guidance to our ad tech teams.
• Analyze system designs and data flows to identify and mitigate potential privacy vulnerabilities.
• Provide privacy support for security incident response and breach response activities.
• Assist in developing and maintaining privacy content for the privacy intranet.
• Support third-party vendor privacy assessments.
• Oversee website cookie scanning management.
• Stay current with GDPR, CCPA/CPRA, HIPAA, and other privacy laws.
• Help manage the OneTrust privacy modules used by Gannett.
• Maintain records of data processing activities and DPIAs to demonstrate compliance.
• Support responding to data subject access requests and program metrics.

Job description

About USA TODAY Co.

USA TODAY Co., Inc. is a diversified media company with expansive reach at the national and local level dedicated to empowering and enriching communities. We seek to inspire, inform, and connect audiences as a sustainable, growth focused media and digital marketing solutions company. Through our trusted brands, including the USA TODAY NETWORK, comprised of the national publication, USA TODAY, and local media organizations, including our network of local properties, in the United States, and Newsquest, a wholly-owned subsidiary operating in the United Kingdom, we provide essential journalism, local content, and digital experiences to audiences and businesses. We deliver high-quality, trusted content with a commitment to balanced, unbiased journalism, where and when consumers want to engage. Our digital marketing solutions brand, LocaliQ, supports small and medium-sized businesses with innovative digital marketing products and solutions.

Position Overview

The position of Privacy Analyst in the USA Today Co. Privacy Office will fulfill a critical role in supporting USA Today Co.'s privacy program to comply with privacy laws, mitigate risk, and build trust with our customers and consumers.

Responsibilities

• Conduct architecture reviews of the ad tech stack and provide privacy guidance to our ad tech teams
• Analyze system designs and data flows to identify and mitigate potential privacy vulnerabilities
• Providing privacy support for security incident response, triaging privacy incident investigation, and supporting the USA Today Co. Privacy Office in related breach response
• Assisting in the development and maintenance of privacy content for the company's privacy intranet
• Support assessments of third-party vendors for privacy compliance
• Website cookie scanning management
• Stay current with international and domestic privacy laws and regulations, including GDPR, CCPA, HIPAA, and others relevant to our industry.
• Help manage the OneTrust suite of privacy modules used by Gannett
• Help to maintain records of data processing activities, data protection impact assessments to demonstrate compliance with applicable data protection laws
• Support responding to data subject rights requests
• Managing program metrics and reporting
• Ad-hoc activities, as required

Requirements

• Strong understanding of data protection laws and regulations (e.g., GDPR, CCPA/CPRA)
• Strong understanding of data privacy principles, risk assessment, and mitigation.
• IAPP certification(s) (CIPM, CIPP, CIPT), or ISO27001 certification(s), or ISACA Privacy Certification
• OneTrust certification
• Familiarity with Privacy by Design principles
• Experience with conducting impactful reviews (PIAs, audits, process evaluations, gap assessments, etc.).
• Experience with Privacy Enhancing Technologies (PETs) and infrastructure for enabling data analysis in a privacy-conscious manner, including sharing business insights with customers and advertisers
• Knowledge of the ad tech ecosystem preferred
• Experience with technical privacy concepts (e.g., anonymization, encryption, differential privacy)
• Bachelor’s degree, 3-5 years of experience in privacy compliance

Salary

The annualized base salary for this role will range between $90,000 and $110,000. Base compensation is reflective of many factors, including, but not limited to, the market in which one lives/works, individual education level, skills, certifications and experience. Note: variable compensation is not reflected in these figures and based on the role, may be applicable.

Equal Opportunity

USA TODAY Co., Inc. is a proud equal opportunity employer committed to building and maintaining a diverse workforce. As such, we will consider all qualified applicants for employment and do not discriminate in connection with employment decisions on the basis of an applicant or employee’s race, color, national origin, ethnicity, ancestry, citizenship status, sex, gender, gender identity, gender expression, religion, age, marital status, personal appearance (including height and weight), sexual orientation, family responsibilities, physical or mental disability, medical condition, pregnancy status (including childbirth, breastfeeding or related medical conditions), education, genetic characteristics or information, political affiliation, military or veteran status or other classifications protected by applicable federal, state and local laws in the jurisdictions where USA TODAY Co. employs employees. In addition, USA TODAY Co., Inc. will provide applicants who require a reasonable accommodation, as a result of an applicant’s disability or religion, to complete this employment application and/or any other process in connection with an individuals’ application for employment with USA TODAY Co., Inc. Applicants who require such accommodation should contact USA TODAY Co., Inc.’s Recruitment Department at . Applicants must be authorized to work in the applicable location. Applications from outside these regions will be removed from our system after submission.