Privacy / Data Protection Analyst II
Salt Lake City, UT (Onsite/Hybrid)
Contract Rate: $30.00 - $40.00per hr.
Contract Duration: Up to 3 Years
ConsultNet is seeking an experienced Privacy / Data Protection Analyst to support the development and ongoing management of a comprehensive data privacy and protection program within a complex research and data environment. This role will monitor compliance with privacy and security frameworks, identify risks and gaps, support remediation efforts, and help develop and maintain privacy policies, procedures, controls, and documentation. The Analyst will work closely with privacy, cybersecurity, IT, and other organizational stakeholders and will help educate staff on data privacy best practices.
Responsibilities
- Development and implementation of a comprehensive Privacy Program for UPDB.
- Tracking compliance status within the organization's security and privacy frameworks.
- Keeping current with developments in data privacy standards and risks.
- Compliance evidence management.
- Continuous cybersecurity and privacy compliance monitoring support.
- Remediation tracking.
- Coordinating with internal and external security and privacy stakeholders.
- Educating colleagues about data privacy best practices.
- Other cybersecurity and system administration duties as assigned.
Required Skills
- Bachelor's degree plus 6 years of directly related experience, or Master's degree plus 4 years of directly related experience.
- Strong understanding of data privacy, data protection, security operations, and technical controls.
- Experience with privacy compliance, data governance, risk assessment, or related disciplines.
- Experience monitoring compliance, identifying gaps against established policies, standards, or regulatory requirements, and supporting remediation activities.
- Ability to maintain compliance evidence and documentation and track remediation activities through completion.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills, with the ability to explain privacy and security concepts to non-technical audiences.
- Ability to work independently and exercise sound judgment in complex situations.
Bonus / Soft Skills
- Experience with NIST 800-171, NIST 800-53, or similar security/privacy frameworks.
- Familiarity with the Utah Government Data Privacy Act (GDPA).
- Information security or privacy certification(s).
- Experience developing or implementing a formal Privacy Program.
- Experience working with highly sensitive or regulated data.
- Experience coordinating with internal and external privacy, cybersecurity, legal, or compliance stakeholders.
- Strong training, presentation, and stakeholder-management skills.
- Ability to stay current with evolving privacy standards, regulations, and emerging risks.