Privacy & Data Protection Analyst

Gannett; United States; On-site; USD 90,000 - 110,000; Full time

Job summary

USA TODAY Co., Inc. is seeking a Privacy Analyst to support its Privacy Office in complying with privacy laws, mitigating risk, and building trust with customers and consumers.

The role covers reviewing ad tech architecture, data flows, incident response, vendor assessments, cookie management, and DPIAs. Requirements include knowledge of GDPR/CCPA, Privacy by Design, PIAs, and certifications such as IAPP CIPM/CIPP/CIPT or ISO27001.

Qualifications

• Strong understanding of data protection laws and regulations (e.g., GDPR, CCPA/CPRA).
• Strong understanding of data privacy principles, risk assessment, and mitigation.
• Experience with Privacy Enhancing Technologies (PETs) and infrastructure for enabling data analysis in a privacy-conscious manner.

Responsibilities

• Conduct architecture reviews of the ad tech stack and provide privacy guidance to our ad tech teams.
• Analyze system designs and data flows to identify and mitigate potential privacy vulnerabilities.
• Provide privacy support for security incident response and breach response activities.
• Assist in developing and maintaining privacy content for the privacy intranet.
• Support third-party vendor privacy assessments.
• Oversee website cookie scanning management.
• Stay current with GDPR, CCPA/CPRA, HIPAA, and other privacy laws.
• Help manage the OneTrust privacy modules used by Gannett.
• Maintain records of data processing activities and DPIAs to demonstrate compliance.
• Support responding to data subject access requests and program metrics.

Job description

USA TODAY Co., Inc. is seeking a Privacy Analyst to support its Privacy Office in complying with privacy laws, mitigating risk, and building trust with customers and consumers.

The role covers reviewing ad tech architecture, data flows, incident response, vendor assessments, cookie management, and DPIAs. Requirements include knowledge of GDPR/CCPA, Privacy by Design, PIAs, and certifications such as IAPP CIPM/CIPP/CIPT or ISO27001.