Privacy & Data Protection Analyst (5985)

NextPath Workforce Solutions; Atlanta (GA); Hybrid; USD 140,000 - 150,000; Full time

Job summary

NextPath Workforce Solutions is seeking a Privacy & Data Protection Analyst to join our client's team in Atlanta, GA. This is a hybrid, direct-hire position.

You will help manage privacy programs, ensure compliance with HIPAA, GDPR, CCPA, and related standards, and support risk assessments. The role requires 3+ years of privacy experience, familiarity with regulatory frameworks, and relevant certifications.

Qualifications

• 3+ years of experience supporting privacy, data protection, or regulated data governance programs.
• Familiarity with privacy and security frameworks such as HIPAA, GDPR/UK GDPR, U.S. state privacy laws, NIST, ISO 27001, NIST 800-171, or CMMC.
• Privacy, security, or risk certifications such as CIPP/US, CIPP/E, CIPM, CIPT, CISSP, CISA, CISM, CRISC, or related credentials preferred.
• Experience in a law firm, professional services, regulated industry, or client-service environment.

Responsibilities

• Support the firm's privacy program, including coordinating Privacy Committee meetings and maintaining governance documentation
• Review and negotiate vendor and client privacy requirements, including Data Processing Agreements, data transfer terms, and privacy provisions within client agreements
• Assess how vendors and software tools handle sensitive privacy-related information as part of third-party risk management
• Complete client privacy and AI assessments, working with internal teams to demonstrate controls and ensure client confidence
• Manage operational privacy processes, including data subject access requests, cookie and consent management, privacy notices, and policy updates
• Lead governance activities for sensitive information types such as PHI and CUI, advising teams on handling and supporting compliance initiatives and audits
• Analyze high-risk matters involving PII, PHI, or sensitive regulatory data and advise on appropriate data handling and protection measures
• Stay updated on relevant privacy and data protection regulations across jurisdictions and translate changes into practical guidance
• Own core privacy governance activities within privacy management tools, including assessments, data flow documentation, risk tracking, remediation, and stakeholder guidance

Skills

Privacy governance

Data protection

Vendor risk

Regulatory frameworks

Job description

NextPath Workforce Solutions is currently seeking a Privacy & Data Protection Analyst to join our client's team in Atlanta, GA. This is a hybrid, direct hire position.

SALARY: $140,000 + $150,000 + bonus (depending on experience)
Unfortunately, at this time our client is unable to sponsor or transfer visas. Only candidates authorized to work in the US without sponsorship should apply.

REQUIREMENTS

• 3+ years of experience supporting privacy, data protection, or regulated data governance programs
• Familiarity with privacy and security frameworks such as HIPAA, GDPR/UK GDPR, U.S. state privacy laws, NIST, ISO 27001, NIST 800-171, or CMMC
• Privacy, security, or risk certifications such as CIPP/US, CIPP/E, CIPM, CIPT, CISSP, CISA, CISM, CRISC, or related credentials preferred
• Experience in a law firm, professional services, regulated industry, or client-service environment

RESPONSIBILITIES

• Support the firm's privacy program, including coordinating Privacy Committee meetings and maintaining governance documentation
• Review and negotiate vendor and client privacy requirements, including Data Processing Agreements, data transfer terms, and privacy provisions within client agreements
• Assess how vendors and software tools handle sensitive privacy-related information as part of third-party risk management
• Complete client privacy and AI assessments, working with internal teams to demonstrate controls and ensure client confidence
• Manage operational privacy processes, including data subject access requests, cookie and consent management, privacy notices, and policy updates
• Lead governance activities for sensitive information types such as PHI and CUI, advising teams on handling and supporting compliance initiatives and audits
• Analyze high-risk matters involving PII, PHI, or sensitive regulatory data and advise on appropriate data handling and protection measures
• Stay updated on relevant privacy and data protection regulations across jurisdictions and translate changes into practical guidance
• Own core privacy governance activities within privacy management tools, including assessments, data flow documentation, risk tracking, remediation, and stakeholder guidance

We are an Equal Opportunity Employer.

#LI-Hybrid
#LI-DV1