AI Privacy Analyst II

Tailored Brands, Inc.; Houston (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Tailored Brands, Inc. seeks a GRC Analyst to develop and maintain privacy, security, and governance policies. Collaborate with business and technology stakeholders to align systems, data, and processes with industry standards and regulatory requirements.

The position requires 5+ years in GRC or privacy–related roles, familiarity with OneTrust, Atlan, Ivanti, and frameworks such as SOC 2, ISO, NIST, PCI, and SOX. Strong communication and ability to drive action are essential.

Qualifications

• Familiarity with privacy, governance, and security frameworks.
• Experience applying laws and standards (e.g., SOC 2, ISO, NIST, PCI, SOX).
• Strong communication and ability to drive action.

Responsibilities

• Develop and maintain privacy, security, and governance policies.
• Collaborate with stakeholders to ensure compliance with industry standards and laws.
• Coordinate privacy and AI risk assessments with business units.
• Liaise with internal and external auditors to support controls and testing.

Skills

GRC

Privacy

Regulatory compliance

Risk assessment

Education

Bachelor's degree in CS/IS/Engineering or related field

Tools

OneTrust

Atlan

Ivanti

Job description

Participate in developing and maintaining policies, procedures, standards, and guidelines. Collaborate with business and technology stakeholders to ensure that systems, processes, services, and data adhere to industry standard best practices for data security, privacy, and artificial intelligence (AI). Liaison with auditors, both internal and external, to maintain and implement controls for compliance and privacy laws. Collaborate with business owners and technical SMEs in the identification, evaluation, treatment, and monitoring of privacy and AI risks. Coordinate responses to Data Subject Access Requests from Consumer and Employees in support of the company regulatory compliance program. Stay abreast of privacy and AI developments in the US and Canada including regulatory actions, passage of new laws, etc. Conduct Privacy Impact and AI Assessments with business stakeholders. Enhance the cookie compliance program, including the assessment of cookie usage and management within Tailored Brand's online services. Collaborate with business owners and technical SMEs to ensure that the program aligns with the industry's best practices and regulatory requirements. Participate in the security, privacy, and AI education program including developing training materials, launching assessments, and monitoring training completion in compliance with various regulatory obligations including, but not limited to, PCI-DSS.

Bachelor's degree in Computer Science, Management Information Systems, Engineering, or other relevant field; or equivalent combination of education and experience required 5+ years of experience as a GRC Analyst, Information Security Risk and Compliance Analyst, Privacy analyst, or comparable role Familiarity with some or all the following types of tools: OneTrust, Atlan, Ivanti Working knowledge of industry best practices and frameworks Experience with CCPA/CPRA, SSAE18 SOC 2, ISO, NIST, PCI, SOX standards, and compliance assessments Experience with cloud computing, online services, web and enterprise applications, and data analytics Experience with data discovery, data mapping, authorization, and access management, and pseudonymization technologies Self-motivated with ability to not only work in a group/individual setting, but able to drive action and make decisions independently The ability to communicate effectively with people at all levels Must be a confident communicator and presenter.

Please note that you do not need to qualify for all requirements to be considered. We encourage you to apply if you can meet most of the requirements and are comfortable opening a dialog to be considered.

Ability to sit and work at a computer keyboard for extended periods of time Ability to stoop, kneel, bend at the waist, and reach daily