Privacy GRC Data Analyst — Hybrid Seattle

Confiz; Seattle (WA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Confiz is hiring a GRC Data Analyst / Program Management professional to advance the privacy program by partnering with business and IT teams, leading privacy-related projects, identifying risks and required controls, ensuring alignment with applicable privacy laws and company standards, and escalating complex issues when senior-level guidance is needed.

This is a hybrid role, based in Seattle, WA. Onsite presence of 4 days per week is expected Monday through Thursday, Remote Fridays.

Qualifications

• Education: Bachelor’s degree or master’s in information technology, Computer Science, Cybersecurity or related experience.
• Experience: 2+ years of privacy or related experience.
• Certifications: IAPP certification (CIPP/US, CIPM, or CIPT) strongly preferred.
• Skills: Strong working knowledge of Canadian (PIPEDA) and U.S. state-level privacy regulations (CCPA, OCPA, Colorado AI Act, Illinois BIPA) and sectoral privacy laws.

Responsibilities

• Lead end-to-end privacy impact assessments for applications, systems and business processes.
• Evaluate privacy risks and document mitigation strategies for partner teams.
• Collaborate with Legal, IT, and Cybersecurity to align privacy controls.
• Identify opportunities to improve privacy assessment processes and tools.
• Assist with audit or maturity assessment initiatives.
• Respond to and fulfill complex data subject access requests (DSARs).
• Maintain data mapping and governance documentation.
• Support rollout of privacy-enhancing technologies and tools.
• Identify and escalate potential privacy risks and mitigate accordingly.
• Lead incident response processes for privacy-related events.

Skills

Data analysis

Privacy regulations

GRC

Stakeholder management

Project management

Education

Bachelor’s or Master’s degree in IT/CS/Cybersecurity

Tools

OneTrust

TrustArc

Job description

Confiz is hiring a GRC Data Analyst / Program Management professional to advance the privacy program by partnering with business and IT teams, leading privacy-related projects, identifying risks and required controls, ensuring alignment with applicable privacy laws and company standards, and escalating complex issues when senior-level guidance is needed.

This is a hybrid role, based in Seattle, WA. Onsite presence of 4 days per week is expected Monday through Thursday, Remote Fridays.